Login Request a demo
Unscored severity · published Mar 6, 2007
CVE-2006-7129
ISS BlackICE PC Protection 3.6 cpj and cpu, and possibly earlier versions, allows local users to bypass the protection scheme by using the ZwDeleteFile API function to delete the…
–
CVSS
0.8%
EPSS
No
On KEV
Description
ISS BlackICE PC Protection 3.6 cpj and cpu, and possibly earlier versions, allows local users to bypass the protection scheme by using the ZwDeleteFile API function to delete the critical filelock.txt file, which stores information about protected files.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 56% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BP
Blackice PC Protection · Iss
3.6cpj; 3.6cpu · source: NVD
Affected product
BP
Blackice PC Protection
Iss
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-7129
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-7129
archives.neohapsis.com
http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0298.html
securityreason.com
http://securityreason.com/securityalert/2361
www.matousec.com
http://www.matousec.com/info/advisories/BlackICE-Filelock-protection-bypass.php
www.osvdb.org
http://www.osvdb.org/30901
www.securityfocus.com
http://www.securityfocus.com/archive/1/448763/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/20546
More from Blackice PC Protection
7.1
CVE-2004-1714
BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.ini with Everyone Full Control permissions, which allows…
–
CVE-2006-4541
RapDrv.sys in BlackICE PC Protection 3.6.cpn, cpj, cpiE, and possibly 3.6 and earlier, allows local users to cause a denial of service (crash) via a NULL third argument to the…
–
CVE-2006-3999
ISS BlackICE PC Protection 3.6.cpj, 3.6.cpiE, and possibly earlier versions do not properly monitor the integrity of the pamversion.dll BlackICE library, which allows local users…
–
CVE-2006-3840
The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and…
–
CVE-2005-2711
ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, and RealSecure Desktop 3.6 and 7.0, does not drop privileges…