CVE-2006-3840

The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop…

published July 27, 2006

CVSS
—
EPSS
2%
Percentile
83.8
In the wild
Unconfirmed
What it is

The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service (infinite loop) via a crafted SMB packet that is not properly handled by the SMB_Mailslot_Heap_Overflow decode.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02384 · 83.8th percentile
Published
2006-07-27T10:00Z
EPSS history
Timeline
  • 27 JUL 10:00Z
    The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop…
    cvelistv5