BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.ini with Everyone Full Control permissions, which allows local users to cause a denial of service (crash) or modify configuration, as demonstrated by modifying firewall.ini to contain a large firewall rule.
References
Link | Resource |
---|---|
http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025112.html | Not Applicable |
http://marc.info/?l=bugtraq&m=109223751031166&w=2 | Mailing List |
http://www.securityfocus.com/bid/10915 | Broken Link Exploit Third Party Advisory VDB Entry Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/16959 | Third Party Advisory VDB Entry |
http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025112.html | Not Applicable |
http://marc.info/?l=bugtraq&m=109223751031166&w=2 | Mailing List |
http://www.securityfocus.com/bid/10915 | Broken Link Exploit Third Party Advisory VDB Entry Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/16959 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:51
Type | Values Removed | Values Added |
---|---|---|
References | () http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025112.html - Not Applicable | |
References | () http://marc.info/?l=bugtraq&m=109223751031166&w=2 - Mailing List | |
References | () http://www.securityfocus.com/bid/10915 - Broken Link, Exploit, Third Party Advisory, VDB Entry, Vendor Advisory | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/16959 - Third Party Advisory, VDB Entry |
26 Jan 2024, 17:21
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : 2.1
v3 : 7.1 |
CWE | CWE-732 | |
References | (BUGTRAQ) http://marc.info/?l=bugtraq&m=109223751031166&w=2 - Mailing List | |
References | (BID) http://www.securityfocus.com/bid/10915 - Broken Link, Exploit, Third Party Advisory, VDB Entry, Vendor Advisory | |
References | (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/16959 - Third Party Advisory, VDB Entry | |
References | (FULLDISC) http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025112.html - Not Applicable |
Information
Published : 2004-08-11 04:00
Updated : 2024-11-20 23:51
NVD link : CVE-2004-1714
Mitre link : CVE-2004-1714
CVE.ORG link : CVE-2004-1714
JSON object : View
Products Affected
iss
- blackice_pc_protection
- blackice_server_protection
CWE
CWE-732
Incorrect Permission Assignment for Critical Resource