PT-2005-3595 · Iss · Iss Blackice+4

Publicado 2005-12-31 · Atualizado 2017-07-11 · CVE-2005-2711

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ISS BlackIce version 3.6 ISS BlackICE PC Protection version 3.6 ISS Server Protection version 3.6 ISS Agent for Server version 3.6 ISS RealSecure Desktop versions 3.6 and 7.0

Description The issue allows local users to execute arbitrary programs as SYSTEM due to the failure to drop privileges before launching help from the "More Info" button in the "Application Protection" dialog.

Recommendations For ISS BlackIce version 3.6, consider restricting access to the "More Info" button in the "Application Protection" dialog until a fix is available. For ISS BlackICE PC Protection version 3.6, restrict the execution of arbitrary programs as SYSTEM by implementing proper privilege dropping mechanisms. For ISS Server Protection version 3.6, implement a fix to drop privileges before launching help from the "More Info" button. For ISS Agent for Server version 3.6, apply a patch or configuration change to ensure proper privilege handling. For ISS RealSecure Desktop versions 3.6 and 7.0, update the application to properly drop privileges before executing help functions.

Correção

Identificadores relacionados

CVE-2005-2711

Produtos afetados

Iss Agent For Server

Blackice Pc Protection

Iss Blackice

Realsecure Desktop

Iss Server Protection

Referências · 9

• http://securitytracker.com/id?1015821 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25423 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2711 · Nota de Segurança
• http://vupen.com/english/advisories/2006/1090 · Nota
• http://securitytracker.com/id?1015820 · Nota
• http://secunia.com/advisories/19327 · Nota
• http://osvdb.org/24096 · Nota
• http://securityfocus.com/bid/17218 · Nota
• http://idefense.com/intelligence/vulnerabilities/display.php?id=403 · Aviso do Fabricante