{"vulnerability": "CVE-2004-0362", "sightings": [{"uuid": "a00da3a5-dfc2-42b7-9083-17d0865bb9d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2004-0362", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:37.000000Z"}, {"uuid": "0075f94f-e2f9-45fd-828d-9aa14b41340f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2004-0362", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:07.000000Z"}, {"uuid": "8425742b-f49c-4bf0-b681-b1daf5ad4138", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2004-0362", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/firewall/blackice_pam_icq.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "af8f9a62-b538-4b5e-a92c-d8099f12c1be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2004-0362", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/16464", "content": "", "creation_timestamp": "2010-09-20T00:00:00.000000Z"}, {"uuid": "23d45893-4e29-44ab-97cb-4c4367f25598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2004-0362", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/firewall/blackice_pam_icq.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"spoonm \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a stack buffer overflow in the ISS products that use\\n          the iss-pam1.dll ICQ parser (Blackice/RealSecure). Successful exploitation\\n          will result in arbitrary code execution as LocalSystem. This exploit\\n          only requires 1 UDP packet, which can be both spoofed and sent to a broadcast\\n          address.\\n\\n          The ISS exception handler will recover the process after each overflow, giving\\n          us the ability to bruteforce the service and exploit it multiple times.\", \"disclosure_date\": \"2004-03-18\", \"fullname\": \"exploit/windows/firewall/blackice_pam_icq\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"ISS PAM.dll ICQ Parser Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/firewall/blackice_pam_icq.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"windows/firewall/blackice_pam_icq\", \"references\": [\"CVE-2004-0362\", \"OSVDB-4355\", \"URL-http://www.eeye.com/html/Research/Advisories/AD20040318.html\"], \"rport\": 1, \"session_types\": false, \"targets\": [\"Bruteforce\", \"Bruteforce iis-pam1.dll\", \"Bruteforce NT 4.0\", \"iis-pam1.dll 3.6.06\", \"iis-pam1.dll 3.6.11\", \"WinNT SP3/SP4/SP5\", \"WinNT SP4/SP5\", \"WinNT SP5/SP6 - advapi32\", \"WinNT SP3/SP5/SP6 - shell32\", \"WinNT SP5/SP6 - mswsock\", \"WinXP SP0/SP1 - shell32\", \"WinXP SP0/SP1 - atl\", \"WinXP SP0/SP1 - atl\", \"WinXP SP0/SP1 - ws2_32\", \"WinXP SP0/SP1 - mswsock\", \"Windows 2000 Pro SP4 English\", \"Win2000 SP0 - SP4\", \"Win2000 SP2/SP3 - samlib\", \"Win2000 SP0/SP1 - activeds\", \"Windows XP Pro SP0 English\", \"Windows XP Pro SP1 English\", \"WinXP SP0 - SP1\", \"Win2003 SP0\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:34.984961Z"}]}