CVE-2002-0957 The default configuration of BlackICE Agent 3.1.eal and 3.1.ebh has a high tcp.maxconnections setting, which could allow remote attackers to cause a denial of service (memory consumption) via a large....
MediumCVSS 5.0
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The default configuration of BlackICE Agent 3.1.eal and 3.1.ebh has a high tcp.maxconnections setting, which could allow remote attackers to cause a denial of service (memory consumption) via a large number of connections to the BlackICE system that consumes more resources than intended by the user.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iss blackice agent | = 3.1eal | No fix listed |
| iss blackice agent | = 3.1ebh | No fix listed |
References
- 20020619 [VulnWatch] KPMG-2002023: BlackICE Agent Temporary Memory Buildup mailing-list
- blackice-excessive-memory-consumption(9405) patch vdb-entry vendor-advisory