High severity · published Aug 11, 2004
CVE-2004-1714
BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.ini with Everyone Full Control permissions, which allows…
7.1
CVSS
0.9%
EPSS
No
On KEV
Description
BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.ini with Everyone Full Control permissions, which allows local users to cause a denial of service (crash) or modify configuration, as demonstrated by modifying firewall.ini to contain a large firewall rule.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 58% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BP
Blackice PC Protection · Iss
3.6cbd; 3.6cbr; 3.6cbz; 3.6cca; 3.6ccb; 3.6ccc; +4 more · source: NVD
BS
Blackice Server Protection · Iss
3.5cdf; 3.6cbz; 3.6cca; 3.6ccb; 3.6ccc; 3.6ccd; +5 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-1714
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-1714
Not Applicable
http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025112.html
Mailing List
http://marc.info/?l=bugtraq&m=109223751031166&w=2
Broken Link
http://www.securityfocus.com/bid/10915
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16959
More from Blackice PC Protection
–
CVE-2006-7129
ISS BlackICE PC Protection 3.6 cpj and cpu, and possibly earlier versions, allows local users to bypass the protection scheme by using the ZwDeleteFile API function to delete the…
–
CVE-2006-4541
RapDrv.sys in BlackICE PC Protection 3.6.cpn, cpj, cpiE, and possibly 3.6 and earlier, allows local users to cause a denial of service (crash) via a NULL third argument to the…
–
CVE-2006-3999
ISS BlackICE PC Protection 3.6.cpj, 3.6.cpiE, and possibly earlier versions do not properly monitor the integrity of the pamversion.dll BlackICE library, which allows local users…
–
CVE-2006-3840
The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and…
–
CVE-2005-2711
ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, and RealSecure Desktop 3.6 and 7.0, does not drop privileges…