ISS BlackICE/PC Protection Unprivileged User Local DoS

medium Nessus Plugin ID 14270

Synopsis

The firewall running on the remote host has a local buffer overflow vulnerability.

Description

ISS BlackICE is a personal Firewall/IDS for windows Desktops. Based on the version number, the remote BlackICE install is vulnerable to a local attack due to incorrect file permissions.

*** Nessus based the results of this test on the contents of *** the local BlackICE configuration file.

Solution

Upgrade to the latest version of BlackICE.

Plugin Details

Severity: Medium

ID: 14270

File Name: blackice_configs.nasl

Version: 1.21

Type: local

Agent: windows

Family: Windows

Published: 8/13/2004

Updated: 11/15/2018

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.0

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

Required KB Items: SMB/Registry/Enumerated

Exploit Available: true

Exploit Ease: Exploits are available

Vulnerability Publication Date: 8/14/2004

Reference Information

CVE: CVE-2004-1714, CVE-2004-2126

BID: 10915

Detections

Analytics