Barnaby Jack

The issue is a stack-based buffer overflow in the Universal Plug and Play (UPnP) service. It allows remote attackers to execute arbitrary code via a long M-SEARCH request to UDP port 1900.

The issue is related to multiple stack-based buffer overflows in the ICQ parsing routines. This can be exploited by remote attackers to execute arbitrary code via a SRV MULTI response containing specific packets with long fields, such as `nickname`, `firstname`, `lastname`, or `email address`. The Witty worm is known to have exploited this issue.

A heap-based buffer overflow issue exists in the ISS Protocol Analysis Module (PAM) used in certain products. This issue allows remote attackers to execute arbitrary code via an SMB packet containing an authentication request with a long `username`.