PT-2006-4844 · Iss · Blackice Pc Protection+1

David Matousek · Publicado 2006-08-05 · Atualizado 2018-10-17 · CVE-2006-3999

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ISS BlackICE PC Protection versions 3.6.cpj, 3.6.cpiE, and possibly earlier versions

Description The issue concerns the improper monitoring of the integrity of the pamversion.dll BlackICE library, allowing local users to subvert BlackICE by replacing pamversion.dll. This is considered a vulnerability because BlackICE is intended to protect against certain rogue privileged actions. Note that replacing pamversion.dll requires administrative privileges, which means the attack would not typically cross privilege boundaries.

Recommendations For ISS BlackICE PC Protection versions 3.6.cpj, 3.6.cpiE, and possibly earlier versions, consider implementing additional integrity checks on the pamversion.dll library to prevent unauthorized replacement. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-3999

Produtos afetados

Blackice Pc Protection

Pamversion.Dll

Referências · 4

• http://securityfocus.com/archive/1/441829/100/0/threaded · Nota
• http://securitytracker.com/id?1016618 · Nota
• http://securityreason.com/securityalert/1338 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3999 · Nota de Segurança