CVE-2006-3840 Denial of service in n/a

Medium 5.0 Published 27 Jul 2006 Updated 7 Aug 2024

Remote attackers can cause a denial of service via crafted SMB packets in ISS security products, requiring patches to prevent infinite loops.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2006-3840?

CVE-2006-3840 is a medium-severity denial of service vulnerability in n/a, published on 27 Jul 2006. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service (infinite loop) via a crafted SMB packet that is not properly handled by the SMB_Mailslot_Heap_Overflow decode.

Weakness: CWE-399

Which versions are affected by CVE-2006-3840?

It affects 10 products.

Products include Iss Blackice Pc Protection, Iss Blackice Server Protection, Iss Proventia a Series Xpu, Iss Proventia Desktop, Iss Proventia G Series Xpu, Iss Proventia M Series Xpu and 4 more.

How do I fix CVE-2006-3840?

No fix has been published for CVE-2006-3840 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2006-3840 being exploited?

There is no known exploitation of CVE-2006-3840 in the wild and no public exploit code.

Sources

Also known as GHSA-8qr2-g9hf-f52c.