CVE-2004-1714 BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.ini with Everyone Full Control permissions, which allows local users to cause a d...
HighCVSS 7.1
EPSS 0.85%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.ini with Everyone Full Control permissions, which allows local users to cause a denial of service (crash) or modify configuration, as demonstrated by modifying firewall.ini to contain a large firewall rule.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iss blackice pc protection | = 3.6cbd | No fix listed |
| iss blackice pc protection | = 3.6cbr | No fix listed |
| iss blackice pc protection | = 3.6cbz | No fix listed |
| iss blackice pc protection | = 3.6cca | No fix listed |
| iss blackice pc protection | = 3.6ccb | No fix listed |
| iss blackice pc protection | = 3.6ccc | No fix listed |
| iss blackice pc protection | = 3.6ccd | No fix listed |
| iss blackice pc protection | = 3.6cce | No fix listed |
| iss blackice pc protection | = 3.6ccf | No fix listed |
| iss blackice pc protection | = 3.6ccg | No fix listed |
| iss blackice server protection | = 3.5cdf | No fix listed |
| iss blackice server protection | = 3.6cbz | No fix listed |
| iss blackice server protection | = 3.6cca | No fix listed |
| iss blackice server protection | = 3.6ccb | No fix listed |
| iss blackice server protection | = 3.6ccc | No fix listed |
| iss blackice server protection | = 3.6ccd | No fix listed |
| iss blackice server protection | = 3.6cce | No fix listed |
| iss blackice server protection | = 3.6ccf | No fix listed |
| iss blackice server protection | = 3.6ccg | No fix listed |
| iss blackice server protection | = 3.6cch | No fix listed |
| iss blackice server protection | = 3.6cno | No fix listed |
References
- 20040811 ISS BlackIce Server Protect Unprivileged User Attack mailing-list not-applicable
- 20040811 BlackICE unprivileged local user attack mailing-list
- 10915 broken-link exploit third-party-advisory vdb-entry vendor-advisory
- blackice-firewall-dos(16959) third-party-advisory vdb-entry