Internet Security Systems SMB Mailslot Parsing Denial of Service Vulnerability

Bugtraq ID:	19178
Class:	Design Error
CVE:	CVE-2006-3840
Remote:	Yes
Local:	No
Published:	Jul 26 2006 12:00AM
Updated:	Jul 28 2006 11:22PM
Credit:	NSFOCUS Security Team is credited with the discovery of this vulnerability.
Vulnerable:	Internet Security Systems RealSecure Server Sensor 7.0 XPU 22.9 Internet Security Systems RealSecure Server Sensor 7.0 XPU 22.8 Internet Security Systems RealSecure Server Sensor 7.0 XPU 22.7 Internet Security Systems RealSecure Server Sensor 7.0 XPU 22.6 Internet Security Systems RealSecure Server Sensor 7.0 XPU 22.5 Internet Security Systems RealSecure Server Sensor 7.0 XPU 22.4 Internet Security Systems RealSecure Server Sensor 7.0 XPU 22.3 Internet Security Systems RealSecure Server Sensor 7.0 XPU 22.2 Internet Security Systems RealSecure Server Sensor 7.0 XPU 22.12 Internet Security Systems RealSecure Server Sensor 7.0 XPU 22.11 Internet Security Systems RealSecure Server Sensor 7.0 XPU 22.10 Internet Security Systems RealSecure Server Sensor 7.0 XPU 22.1 Internet Security Systems RealSecure Server Sensor 7.0 XPU 20.19 Internet Security Systems RealSecure Server Sensor 7.0 XPU 20.18 Internet Security Systems RealSecure Server Sensor 7.0 XPU 20.16 Internet Security Systems RealSecure Network Sensor 7.0 XPU 22.4 Internet Security Systems RealSecure Network Sensor 7.0 XPU 22.9 Internet Security Systems RealSecure Network Sensor 7.0 XPU 22.8 Internet Security Systems RealSecure Network Sensor 7.0 XPU 22.7 Internet Security Systems RealSecure Network Sensor 7.0 XPU 22.6 Internet Security Systems RealSecure Network Sensor 7.0 XPU 22.10 Internet Security Systems RealSecure Network Sensor 7.0 XPU 20.12 Internet Security Systems RealSecure Network Sensor 7.0 XPU 20.11 Internet Security Systems RealSecure Network Sensor 7.0 Internet Security Systems RealSecure Desktop 7.0 ebm Internet Security Systems RealSecure Desktop 7.0 ebl Internet Security Systems RealSecure Desktop 7.0 ebk Internet Security Systems RealSecure Desktop 7.0 ebj Internet Security Systems RealSecure Desktop 7.0 ebh Internet Security Systems RealSecure Desktop 7.0 ebg Internet Security Systems RealSecure Desktop 7.0 ebf Internet Security Systems RealSecure Desktop 7.0 eba Internet Security Systems Proventia M Series XPU 1.9 Internet Security Systems Proventia M Series XPU 1.8 Internet Security Systems Proventia M Series XPU 1.7 Internet Security Systems Proventia M Series XPU 1.6 Internet Security Systems Proventia M Series XPU 1.5 Internet Security Systems Proventia M Series XPU 1.4 Internet Security Systems Proventia M Series XPU 1.3 Internet Security Systems Proventia M Series XPU 1.2 Internet Security Systems Proventia M Series XPU 1.10 Internet Security Systems Proventia M Series XPU 1.1 Internet Security Systems Proventia A Series XPU 22.9 Internet Security Systems Proventia A Series XPU 22.10 Internet Security Systems Proventia A Series XPU 20.15 Internet Security Systems Proventia A Series XPU 20.14 Internet Security Systems Proventia A Series XPU 20.13 Internet Security Systems Proventia A Series XPU 20.12 Internet Security Systems Proventia A Series XPU 20.11 Internet Security Systems Proventia A Series XPU 22.8 Internet Security Systems Proventia A Series XPU 22.7 Internet Security Systems Proventia A Series XPU 22.6 Internet Security Systems Proventia A Series XPU 22.5 Internet Security Systems Proventia A Series XPU 22.4 Internet Security Systems Proventia A Series XPU 22.3 Internet Security Systems Proventia A Series XPU 22.2 Internet Security Systems Proventia A Series XPU 22.1 Internet Security Systems BlackIce Server Protection 3.6 coq Internet Security Systems BlackIce Server Protection 3.6 cop Internet Security Systems BlackIce Server Protection 3.6 coo Internet Security Systems BlackIce Server Protection 3.6 con Internet Security Systems BlackIce Server Protection 3.6 com Internet Security Systems BlackIce Server Protection 3.6 col Internet Security Systems BlackIce Server Protection 3.6 cok Internet Security Systems BlackIce Server Protection 3.6 coj Internet Security Systems BlackIce Server Protection 3.6 coi Internet Security Systems BlackIce Server Protection 3.6 coh Internet Security Systems BlackIce Server Protection 3.6 cog Internet Security Systems BlackIce Server Protection 3.6 cof Internet Security Systems BlackIce Server Protection 3.6 coe Internet Security Systems BlackIce Server Protection 3.6 cod Internet Security Systems BlackIce Server Protection 3.6 coc Internet Security Systems BlackIce Server Protection 3.6 cob Internet Security Systems BlackIce Server Protection 3.6 coa Internet Security Systems BlackIce Server Protection 3.6 cch Internet Security Systems BlackIce Server Protection 3.6 ccg Internet Security Systems BlackIce Server Protection 3.6 ccf Internet Security Systems BlackIce Server Protection 3.6 cce Internet Security Systems BlackIce Server Protection 3.6 ccd Internet Security Systems BlackIce Server Protection 3.6 ccc Internet Security Systems BlackIce Server Protection 3.6 ccb Internet Security Systems BlackIce Server Protection 3.6 cca Internet Security Systems BlackIce Server Protection 3.6 cbz Internet Security Systems BlackIce Server Protection 3.6 cbr Internet Security Systems BlackIce Server Protection 3.6 .cno Internet Security Systems BlackICE PC Protection 3.6 cch Internet Security Systems BlackICE PC Protection 3.6 ccg Internet Security Systems BlackICE PC Protection 3.6 ccf Internet Security Systems BlackICE PC Protection 3.6 cce Internet Security Systems BlackICE PC Protection 3.6 ccd Internet Security Systems BlackICE PC Protection 3.6 ccc Internet Security Systems BlackICE PC Protection 3.6 ccb Internet Security Systems BlackICE PC Protection 3.6 cca Internet Security Systems BlackICE PC Protection 3.6 cbz Internet Security Systems BlackICE PC Protection 3.6 cbr Internet Security Systems BlackICE PC Protection 3.6 cbd Internet Security Systems BlackICE PC Protection 3.6 .cno Internet Security Systems BlackICE PC Protection 3.6 .cbz IBM Proventia G Series XPU 22.9 IBM Proventia G Series XPU 22.8 IBM Proventia G Series XPU 22.7 IBM Proventia G Series XPU 22.6 IBM Proventia G Series XPU 22.5 IBM Proventia G Series XPU 22.4 IBM Proventia G Series XPU 22.3 IBM Proventia G Series XPU 22.2 IBM Proventia G Series XPU 22.12 IBM Proventia G Series XPU 22.11 IBM Proventia G Series XPU 22.10 IBM Proventia G Series XPU 22.1
Not Vulnerable:

Internet Security Systems SMB Mailslot Parsing Denial of Service Vulnerability

The Internet Security Systems implementation of SMB/TCP Mailslot is prone to a denial-of-service vulnerability. This issue is due to a design error when dealing with certain legitimate SMB Mailslot traffic.

An attacker can exploit this issue to crash the affected service, effectively denying service to legitimate users.

Internet Security Systems SMB Mailslot Parsing Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Internet Security Systems SMB Mailslot Parsing Denial of Service Vulnerability

Solution:
The vendor has released a patch to address this issue.

Please see the referenced advisories for more information.

Internet Security Systems SMB Mailslot Parsing Denial of Service Vulnerability

References:

• Protocol Parsing Bug in SMB Mailslot Parsing in ISS Products (Internet Security Systems)
  
• This issue can affect all PAM based products that deployed XPU (24.39/1.78/epj/x (Internet Security Systems)
  
• NSFOCUS SA2006-07 : ISS RealSecure/BlackICE MailSlot Heap Overflow Detection Rem (NSFOCUS Security Team)