PT-2004-2618 · Unknown · Blackice Server Protection+1

Published 2004-08-11 · Updated 2024-01-26 · CVE-2004-1714

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions BlackICE PC Protection and Server Protection (affected versions not specified)

Description The issue allows local users to cause a denial of service or modify configuration due to the installation of certain files with Everyone Full Control permissions. Specifically, files such as firewall.ini, blackice.ini, sigs.ini, and protect.ini are installed with these permissions. This can be exploited by modifying the firewall.ini file to contain a large firewall rule, demonstrating the potential for a denial of service or configuration modification.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2004-1714

Affected Products

Blackice Pc Protection

Blackice Server Protection

References · 7

• 🔥 https://exploit-db.com/exploits/24362 · Exploit
• 🔥 http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025112.html · Exploit
• 🔥 http://securityfocus.com/bid/10915 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-1714 · Security Note
• https://t.me/cvenotify/68888 · Telegram Post
• http://marc.info/?l=bugtraq&m=109223751031166&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16959 · Note