CVE-2004-0193: Iss Blackice Agent Server

High severity, CVSS 7.5. EPSS: 8% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A, G, and M Series, RealSecure Desktop 7.0 and 3.6, RealSecure Guard 3.6, RealSecure Sentry 3.6, BlackICE PC Protection 3.6, and BlackICE Server Protection 3.6, allows remote attackers to execute arbitrary code via an SMB packet containing an authentication request with a long username.

Affected products

• Iss Blackice Agent Server: version 3.6eca only
• Iss Blackice Pc Protection: version 3.6cbd only
• Iss Blackice Server Protection: version 3.6cbz only
• Iss Proventia A Series Xpu: version 20.15 only
• Iss Proventia G Series Xpu: version 22.3 only
• Iss Proventia M Series Xpu: version 1.30 only
• Iss Realsecure Desktop: version 3.6eca only; version 3.6ecf only; version 7.0ebg only; version 7.0epk only
• Iss Realsecure Guard: version 3.6ecb only
• Iss Realsecure Network: version 7.0 only
• Iss Realsecure Sentry: version 3.6ecf only
• Iss Realsecure Server Sensor: version 7.0 only

Published 2004-03-15. Last modified 2026-06-16.