CVE:CVE-2006-3840
CNNVD:CNNVD-200607-462
ISS是国际知名的安全厂商，提供多种防火墙和入侵检测设备。
 ISS的保护产品在对SMB_MailSlot_Heap_Overflow(MS06-035/KB917159)漏洞的检测中存在一个拒绝服务漏洞。通过构造特定攻击报文，可以导致检测代码陷入死循环。这可能导致某些ISS保护产品甚至操作系统停止响应。例如，对于BlackICE，会使得BlackICE所在主机网络中断，同时CPU占用率接近百分之百。停止BlackICE引擎并不能恢复正常，需要重启操作系统。
 攻击者只需要发送单包就可以触发此漏洞，无需真正建立SMB会话。
solution:Upgrade iss blackice_pc_protection to a higher version than 3.6cpk,and avoid the version 3.6cpk; Upgrade iss blackice_server_protection to a higher version than 3.6cpk,and avoid the version 3.6cpk; Upgrade iss proventia_desktop to a higher version than 8.0.675.1790,8.0.812.1790,and avoid the version 8.0.675.1790,8.0.812.1790; Upgrade iss realsecure_desktop to a higher version than 7.0epk,and avoid the version 7.0epk; Upgrade iss realsecure_network to a higher version than 7.0,and avoid the version 7.0; Upgrade iss realsecure_server_sensor to a higher version than 7.0,and avoid the version 7.0; Upgrade iss proventia_a_series_xpu to a higher version than *; Upgrade iss proventia_g_series_xpu to a higher version than *; Upgrade iss proventia_m_series_xpu to a higher version than *; Upgrade iss proventia_server to a higher version than 1.0.914.1880,and avoid the version 1.0.914.1880