PT-2004-3022 · Ibm · Blackice Pc Protection

Kf · Publicado 2004-12-31 · Atualizado 2016-10-18 · CVE-2004-2126

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions BlackICE PC Protection versions 3.6 and earlier

Description The issue allows local users to modify configuration or possibly execute arbitrary code by exploiting vulnerabilities in the .INI parsers, due to insecure permissions set for .INI files such as blackice.ini, firewall.ini, protect.ini, or sigs.ini.

Recommendations For BlackICE PC Protection versions 3.6 and earlier, consider restricting access to the .INI files to prevent modification and potential code execution until a proper fix is applied. As a temporary workaround, manually set secure permissions for the .INI files to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2004-2126

Produtos afetados

Blackice Pc Protection

Referências · 3

• http://securityfocus.com/bid/9513 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2126 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=107530966524193&w=2 · Nota