PT-2006-4844 · Iss · Blackice Pc Protection+1

David Matousek · Published 2006-08-05 · Updated 2018-10-17 · CVE-2006-3999

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ISS BlackICE PC Protection versions 3.6.cpj, 3.6.cpiE, and possibly earlier versions

Description The issue concerns the improper monitoring of the integrity of the pamversion.dll BlackICE library, allowing local users to subvert BlackICE by replacing pamversion.dll. This is considered a vulnerability because BlackICE is intended to protect against certain rogue privileged actions. Note that replacing pamversion.dll requires administrative privileges, which means the attack would not typically cross privilege boundaries.

Recommendations For ISS BlackICE PC Protection versions 3.6.cpj, 3.6.cpiE, and possibly earlier versions, consider implementing additional integrity checks on the pamversion.dll library to prevent unauthorized replacement. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-3999

Affected Products

Blackice Pc Protection

Pamversion.Dll

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2006-3999 · Security Note
• http://securityfocus.com/archive/1/441829/100/0/threaded · Note
• http://securitytracker.com/id?1016618 · Note
• http://securityreason.com/securityalert/1338 · Note