CVE-2006-7129
6.5 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
0.4%
ISS BlackICE PC Protection 3.6 cpj and cpu, and possibly earlier versions, allows local users to bypass the protection scheme by using the ZwDeleteFile API function to delete the critical filelock.txt file, which stores information about protected files.
Affected configurations
References
archives.neohapsis.com/archives/fulldisclosure/2006-10/0298.html
securityreason.com/securityalert/2361
www.matousec.com/info/advisories/BlackICE-Filelock-protection-bypass.php
www.osvdb.org/30901
www.securityfocus.com/archive/1/448763/100/0/threaded
www.securityfocus.com/bid/20546
exchange.xforce.ibmcloud.com/vulnerabilities/29575
6.5 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
0.4%