PT-2004-3022 · Ibm · Blackice Pc Protection

Kf · Published 2004-12-31 · Updated 2016-10-18 · CVE-2004-2126

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions BlackICE PC Protection versions 3.6 and earlier

Description The issue allows local users to modify configuration or possibly execute arbitrary code by exploiting vulnerabilities in the .INI parsers, due to insecure permissions set for .INI files such as blackice.ini, firewall.ini, protect.ini, or sigs.ini.

Recommendations For BlackICE PC Protection versions 3.6 and earlier, consider restricting access to the .INI files to prevent modification and potential code execution until a proper fix is applied. As a temporary workaround, manually set secure permissions for the .INI files to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2004-2126

Affected Products

Blackice Pc Protection

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2004-2126 · Security Note
• http://securityfocus.com/bid/9513 · Note
• http://marc.info/?l=bugtraq&m=107530966524193&w=2 · Note