2.1
CVSSv2

CVE-2004-1714

Published: 11/08/2004 Updated: 26/01/2024
CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9
CVSS v3 Base Score: 7.1 | Impact Score: 5.2 | Exploitability Score: 1.8
VMScore: 215
Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.ini with Everyone Full Control permissions, which allows local users to cause a denial of service (crash) or modify configuration, as demonstrated by modifying firewall.ini to contain a large firewall rule.

Vulnerable Product Search on Vulmon Subscribe to Product

iss blackice server protection 3.6ccg

iss blackice pc protection 3.6ccf

iss blackice pc protection 3.6ccb

iss blackice pc protection 3.6cbz

iss blackice pc protection 3.6cce

iss blackice pc protection 3.6cbr

iss blackice pc protection 3.6cca

iss blackice server protection 3.6cch

iss blackice server protection 3.6ccb

iss blackice server protection 3.6cno

iss blackice pc protection 3.6ccd

iss blackice server protection 3.5cdf

iss blackice server protection 3.6cce

iss blackice pc protection 3.6ccc

iss blackice server protection 3.6ccd

iss blackice pc protection 3.6cbd

iss blackice server protection 3.6cca

iss blackice pc protection 3.6ccg

iss blackice server protection 3.6ccc

iss blackice server protection 3.6cbz

iss blackice server protection 3.6ccf

Exploits

source: wwwsecurityfocuscom/bid/10915/info It is reported that BlackICE PC Protection is prone to a local buffer overrun when handling excessive input in certain configuration directives parsed from the firewallini file included with the software It is reported that when the system is restarted, and the affected software reads the mali ...