PT-2002-1307 · Iss · Blackice Agent+2

Published 2002-05-29 · Updated 2016-10-18 · CVE-2002-0237

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ISS BlackICE Defender versions 2.9 and earlier BlackICE Agent versions 3.0 and 3.1 RealSecure Server Sensor versions 6.0.1 and 6.5

Description The issue allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a flood of large ICMP ping packets.

Recommendations For ISS BlackICE Defender versions 2.9 and earlier, update to a version later than 2.9. For BlackICE Agent versions 3.0 and 3.1, update to a version later than 3.1. For RealSecure Server Sensor versions 6.0.1 and 6.5, update to a version later than 6.5.

Fix

Related Identifiers

CVE-2002-0237

Affected Products

Blackice Agent

Blackice Defender

Realsecure Server Sensor

References · 8

• http://iss.net/security_center/alerts/advise109.php · Vendor Advisory
• http://iss.net/security_center/static/8058.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0237 · Security Note
• http://marc.info/?l=bugtraq&m=101286393404301&w=2 · Note
• http://marc.info/?l=bugtraq&m=101302424803268&w=2 · Note
• http://marc.info/?l=bugtraq&m=101321744807452&w=2 · Note
• http://marc.info/?l=ntbugtraq&m=101353165915171&w=2 · Note
• http://securityfocus.com/bid/4025 · Note