PT-2003-2472 · Black Ice · Server Protection+1

Published 2003-12-31 · Updated 2008-09-05 · CVE-2003-1527

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions BlackICE Defender version 2.9.cap Server Protection version 3.5.cdf

Description The issue allows remote attackers to cause a denial of service by blocking IP addresses via spoofed packets when the software is configured to automatically block attacks.

Recommendations For BlackICE Defender version 2.9.cap, consider disabling the automatic block attacks feature until a patch is available. For Server Protection version 3.5.cdf, restrict access to the automatic block attacks configuration to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2003-1527

Affected Products

Blackice Defender

Server Protection

References · 4

• 🔥 http://securityfocus.com/bid/5917 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-1527 · Security Note
• http://iss.net/security_center/static/10314.php · Note
• http://online.securityfocus.com/archive/1/294411 · Note