high7.1Public exploit code
CVE-2004-1714
BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.ini with Everyone Full Control permissio…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Internet Security Systems BlackICE PC Protection 3.6 - Firewall.INI Local Buffer Overrun2004-08-11 · dos · windows · Verified
Impact
BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.ini with Everyone Full Control permissions, which allows local users to cause a denial of service (crash) or modify configuration, as demonstrated by modifying firewall.ini to contain a large firewall rule.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Iss | Blackice Pc Protection | Versions 3.6cbd, 3.6cbr, 3.6cbz, 3.6cca, 3.6ccb, 3.6ccc |
| Iss | Blackice Server Protection | Versions 3.5cdf, 3.6cbz, 3.6cca, 3.6ccb, 3.6ccc, 3.6ccd |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025112.html
- http://marc.info/?l=bugtraq&m=109223751031166&w=2
- http://www.securityfocus.com/bid/10915
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16959
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025112.html
- http://marc.info/?l=bugtraq&m=109223751031166&w=2
- http://www.securityfocus.com/bid/10915
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16959