GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

FKIE_CVE-2006-3840

Vulnerability from fkie_nvd - Published: 2006-07-27 11:04 - Updated: 2026-06-16 22:27
Severity
Summary
The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service (infinite loop) via a crafted SMB packet that is not properly handled by the SMB_Mailslot_Heap_Overflow decode.
References
cve@mitre.orghttp://secunia.com/advisories/21219Vendor Advisory
cve@mitre.orghttp://securitytracker.com/id?1016590
cve@mitre.orghttp://securitytracker.com/id?1016591
cve@mitre.orghttp://securitytracker.com/id?1016592
cve@mitre.orghttp://www.nsfocus.com/english/homepage/research/0607.htm
cve@mitre.orghttp://www.securityfocus.com/archive/1/441278/100/0/threaded
cve@mitre.orghttp://www.securityfocus.com/bid/19178
cve@mitre.orghttp://www.vupen.com/english/advisories/2006/2996Vendor Advisory
cve@mitre.orghttp://xforce.iss.net/xforce/alerts/id/230Vendor Advisory
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/27965
cve@mitre.orghttps://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=3630
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/21219Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1016590
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1016591
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1016592
af854a3a-2127-422b-91ae-364da2661108http://www.nsfocus.com/english/homepage/research/0607.htm
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/441278/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/19178
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/2996Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://xforce.iss.net/xforce/alerts/id/230Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/27965
af854a3a-2127-422b-91ae-364da2661108https://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=3630
Impacted products
Vendor Product Version
iss blackice_pc_protection 3.6cpk
iss blackice_server_protection 3.6cpk
iss proventia_desktop 8.0.675.1790
iss proventia_desktop 8.0.812.1790
iss realsecure_desktop 7.0epk
iss realsecure_network 7.0
iss realsecure_server_sensor 7.0
iss proventia_a_series_xpu *
iss proventia_g_series_xpu *
iss proventia_m_series_xpu *
iss proventia_server 1.0.914.1880
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:iss:blackice_pc_protection:3.6cpk:*:*:*:*:*:*:*",
              "matchCriteriaId": "643BC973-847D-43EB-A1BE-356C36F61123",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:iss:blackice_server_protection:3.6cpk:*:*:*:*:*:*:*",
              "matchCriteriaId": "22CCE20A-E955-4630-9D6A-FBEF9DE5595B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:iss:proventia_desktop:8.0.675.1790:*:*:*:*:*:*:*",
              "matchCriteriaId": "1538F0E9-E5B9-4D2D-B5FC-084DFB9A2899",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:iss:proventia_desktop:8.0.812.1790:*:*:*:*:*:*:*",
              "matchCriteriaId": "27D878CE-7CB9-4A24-B836-4E14447F53B9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:iss:realsecure_desktop:7.0epk:*:*:*:*:*:*:*",
              "matchCriteriaId": "F3CEB52E-9D4F-456A-A0C9-38E9D5FB6770",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:iss:realsecure_network:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "D8282F03-33D2-4545-9E36-3FC0EB6B291F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:iss:realsecure_server_sensor:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "216E89B1-4096-487C-AB3A-79FF2FAE523B",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:iss:proventia_a_series_xpu:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FDCF39B2-42A9-4B6E-B70B-0DA8D61E1ED1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:iss:proventia_g_series_xpu:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CA4C8341-4801-4751-88EB-1F5048C49778",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:iss:proventia_m_series_xpu:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8F4318C6-AF27-4099-AAE9-3DDC6DA202FA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:iss:proventia_server:1.0.914.1880:*:*:*:*:*:*:*",
              "matchCriteriaId": "2EDE7886-53E6-4E97-A6ED-F97CF31714C3",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service (infinite loop) via a crafted SMB packet that is not properly handled by the SMB_Mailslot_Heap_Overflow decode."
    },
    {
      "lang": "es",
      "value": "La funcionalidad SMB Mailslot en PAM en m\u00faltiples productos ISS con XPU (24.39/1.78/epj/x.x.x.1780), incluyendo Proventia A, G, M, Server, y Desktop, BlackICE PC y Server Protection 3.6, y RealSecure 7.0,permiten a atacantes remotos provocar denegaci\u00f3n de servicio (bucle infinito) a trav\u00e9s de paquetes SMB manipulados que no son manejados adecuadamente por el decodificador SMB_Mailslot_Heap_Overflow."
    }
  ],
  "id": "CVE-2006-3840",
  "lastModified": "2026-06-16T22:27:56.383",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2006-07-27T11:04:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/21219"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1016590"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1016591"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1016592"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.nsfocus.com/english/homepage/research/0607.htm"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/441278/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/19178"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2006/2996"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://xforce.iss.net/xforce/alerts/id/230"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27965"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=3630"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/21219"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1016590"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1016591"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1016592"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.nsfocus.com/english/homepage/research/0607.htm"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/441278/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/19178"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2006/2996"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://xforce.iss.net/xforce/alerts/id/230"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27965"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=3630"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.