PT-2002-1307 · Iss · Blackice Agent+2

Publicado 2002-05-29 · Atualizado 2016-10-18 · CVE-2002-0237

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ISS BlackICE Defender versions 2.9 and earlier BlackICE Agent versions 3.0 and 3.1 RealSecure Server Sensor versions 6.0.1 and 6.5

Description The issue allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a flood of large ICMP ping packets.

Recommendations For ISS BlackICE Defender versions 2.9 and earlier, update to a version later than 2.9. For BlackICE Agent versions 3.0 and 3.1, update to a version later than 3.1. For RealSecure Server Sensor versions 6.0.1 and 6.5, update to a version later than 6.5.

Correção

Identificadores relacionados

CVE-2002-0237

Produtos afetados

Blackice Agent

Blackice Defender

Realsecure Server Sensor

Referências · 8

• http://marc.info/?l=bugtraq&m=101286393404301&w=2 · Nota
• http://iss.net/security_center/alerts/advise109.php · Aviso do Fabricante
• http://iss.net/security_center/static/8058.php · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=101302424803268&w=2 · Nota
• http://marc.info/?l=bugtraq&m=101321744807452&w=2 · Nota
• http://marc.info/?l=ntbugtraq&m=101353165915171&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0237 · Nota de Segurança
• http://securityfocus.com/bid/4025 · Nota