Read the docs
TI-2006-03726 Aliases CVE-2006-3840GHSA-8qr2-g9hf-f52c

The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU…

Priority LOW 27CWE-399Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-399 and the CVSS impact.

Summary

The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service (infinite loop) via a crafted SMB packet that is not properly handled by the SMB_Mailslot_Heap_Overflow decode.

Why it matters now

EPSS 0.02384 84th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 11

CPEVersionsRoleVendor
cpe:2.3:a:iss:blackice_pc_protection:3.6cpk:*:*:*:*:*:*:*3.6cpkVulnerableISS
cpe:2.3:a:iss:blackice_server_protection:3.6cpk:*:*:*:*:*:*:*3.6cpkVulnerableISS
cpe:2.3:a:iss:proventia_desktop:8.0.675.1790:*:*:*:*:*:*:*8.0.675.1790VulnerableISS
cpe:2.3:a:iss:proventia_desktop:8.0.812.1790:*:*:*:*:*:*:*8.0.812.1790VulnerableISS
cpe:2.3:a:iss:realsecure_desktop:7.0epk:*:*:*:*:*:*:*7.0epkVulnerableISS
cpe:2.3:a:iss:realsecure_network:7.0:*:*:*:*:*:*:*7.0VulnerableISS
cpe:2.3:a:iss:realsecure_server_sensor:7.0:*:*:*:*:*:*:*7.0VulnerableISS
cpe:2.3:h:iss:proventia_a_series_xpu:*:*:*:*:*:*:*:*all versionsVulnerableISS
cpe:2.3:h:iss:proventia_g_series_xpu:*:*:*:*:*:*:*:*all versionsVulnerableISS
cpe:2.3:h:iss:proventia_m_series_xpu:*:*:*:*:*:*:*:*all versionsVulnerableISS
  • cpe:2.3:a:iss:blackice_pc_protection:3.6cpk:*:*:*:*:*:*:* Versions 3.6cpk Vulnerable ·ISS
  • cpe:2.3:a:iss:blackice_server_protection:3.6cpk:*:*:*:*:*:*:* Versions 3.6cpk Vulnerable ·ISS
  • cpe:2.3:a:iss:proventia_desktop:8.0.675.1790:*:*:*:*:*:*:* Versions 8.0.675.1790 Vulnerable ·ISS
  • cpe:2.3:a:iss:proventia_desktop:8.0.812.1790:*:*:*:*:*:*:* Versions 8.0.812.1790 Vulnerable ·ISS
  • cpe:2.3:a:iss:realsecure_desktop:7.0epk:*:*:*:*:*:*:* Versions 7.0epk Vulnerable ·ISS
  • cpe:2.3:a:iss:realsecure_network:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·ISS
  • cpe:2.3:a:iss:realsecure_server_sensor:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·ISS
  • cpe:2.3:h:iss:proventia_a_series_xpu:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ISS
  • cpe:2.3:h:iss:proventia_g_series_xpu:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ISS
  • cpe:2.3:h:iss:proventia_m_series_xpu:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·ISS
Show 1 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:iss:proventia_server:1.0.914.1880:*:*:*:*:*:*:*1.0.914.1880VulnerableISS
  • cpe:2.3:h:iss:proventia_server:1.0.914.1880:*:*:*:*:*:*:* Versions 1.0.914.1880 Vulnerable ·ISS

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2006-3840
  2. 2026-10-03 Alias added: GHSA-8qr2-g9hf-f52c

References

Advisory 2

Other 2

  • TI-2004-00331 Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol… CVSS 2.0HIGH 7.5
  • TI-2004-00167 Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain… CVSS 2.0HIGH 7.5
  • TI-2004-01590 BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini… CVSS 3.1HIGH 7.1
  • TI-2005-02574 ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server… CVSS 2.0HIGH 7.2
  • TI-2006-04387 RapDrv.sys in BlackICE PC Protection 3.6.cpn, cpj, cpiE, and possibly 3.6 and earlier… CVSS 2.0MEDIUM 4.6
  • TI-2004-01999 The upgrade for BlackICE PC Protection 3.6 and earlier sets insecure permissions for .INI… CVSS 2.0MEDIUM 4.6
See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences