CVE-2004-2125

The CVE-2004-2125 entry describes a local privilege escalation in BlackICE PC Protection before 3.6.ccb, caused by a buffer overflow in blackd.exe when a long packetLog.fileprefix value is written into the application’s INI file. Affected product: BlackICE PC Protection 3.6 and earlier (3.6.ccb)....

CVE-2004-1714

BlackICE PC Protection and Server Protection installs 1 firewall.ini, 2 blackice.ini, 3 sigs.ini and 4 protect.ini with Everyone Full Control permissions, which allows local users to cause a denial of service crash or modify configuration, as demonstrated by modifying firewall.ini to contain a...

CVE-2004-1714

CVE-2004-1714 affects BlackICE PC Protection and Server Protection. The issue arises from installation of firewall.ini, blackice.ini, sigs.ini, and protect.ini with Everyone Full Control permissions, enabling a local attacker to crash the service or modify configuration by editing firewall.ini (e...

CVE-2004-2125

Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with application protection off, allows local users to gain system privileges by modifying the .INI file to contain a long packetLog.fileprefix value...

CVE-2004-2126

The upgrade for BlackICE PC Protection 3.6 and earlier sets insecure permissions for .INI files such as 1 blackice.ini, 2 firewall.ini, 3 protect.ini, or 4 sigs.ini, which allows local users to modify BlackICE configuration or possibly execute arbitrary code by exploiting vulnerabilities in the...

ISS BlackICE/PC Protection Unprivileged User Local DoS

ISS BlackICE is a personal Firewall/IDS for windows Desktops. Based on the version number, the remote BlackICE install is vulnerable to a local attack due to incorrect file permissions. Nessus based the results of this test on the contents of the local BlackICE configuration file. C Tenable Netwo...

ISS BlackIce buffer overflow

Buffer overflow on configuration reading...

ISS BlackIce Server Protect Unprivileged User Attack

Release Date: August 11, 2004 Severity: Medium Vendor: Internet Security Systems Software: BlackIce Server Protect 3.6cno and below Remote: Remotely Executable from Local and Trusted Networks Vulnerabilities: Unpriviledged User Attack Technical Details: Unpriviledged User Attack was originally...

BlackICE unprivileged local user attack

Pimp industries. "Its all about the Bling, B^!@s and Fame!" BlackICE PC protection / Server Protection Tested on version v3.6.cno Unprivileged local user disabling anyone from using BlackICE C Paul Craig - Pimp Industries 2004 Background ------------- Blackice is a firewall developed by ISS,...

CVE-2004-1714

BlackICE PC Protection and Server Protection installs 1 firewall.ini, 2 blackice.ini, 3 sigs.ini and 4 protect.ini with Everyone Full Control permissions, which allows local users to cause a denial of service crash or modify configuration, as demonstrated by modifying firewall.ini to contain a...

Internet Security Systems BlackICE PC Protection 3.6 - Firewall.INI Local Buffer Overrun

source: https://www.securityfocus.com/bid/10915/info It is reported that BlackICE PC Protection is prone to a local buffer overrun when handling excessive input in certain configuration directives parsed from the firewall.ini file included with the software. It is reported that when the system is...

Internet Security Systems BlackICE PC Protection 3.6 - Firewall.INI Local Buffer Overrun

Internet Security Systems BlackICE PC Protection 3.6 - Firewall.INI Local Buffer Overrun source: https://www.securityfocus.com/bid/10915/info It is reported that BlackICE PC Protection is prone to a local buffer overrun when handling excessive input in certain configuration directives parsed from...

PT-2004-2618 · Unknown · Blackice Server Protection +1

Name of the Vulnerable Software and Affected Versions: BlackICE PC Protection and Server Protection affected versions not specified Description: The issue allows local users to cause a denial of service or modify configuration due to the installation of certain files with Everyone Full Control...

Immunity Canvas: BLACKICE

Name| blackice ---|--- CVE| CVE-2004-0362 Exploit Pack| CANVAS Description| BlackIce Stack Overflow Notes| CVE Name: CVE-2004-0362 VENDOR: ISS Notes: This is the exploit that the Witty worm used. Try it a couple times if it doens't work initially. Repeatability: This is a one shot exploit. CVE Ur...

RealSecure / Blackice iss_pam1.dll Remote Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================== RealSecure / Blackice isspam1.dll Remote Overflow Exploit ========================================================== / 557isspamexp - RealSecure / Blackice ICQ isspam1.dll remote...

RealSecure Blackice - iss_pam1.dll Remote Overflow

RealSecure Blackice - isspam1.dll Remote Overflow / 557isspamexp - RealSecure / Blackice ICQ isspam1.dll remote overflow exploit Copyright c SST 2004 All rights reserved. Public version code by Sam Sam@efnet and 2004/03/26 Compile: gcc -o 557isspamexp 557isspamexp.c how works? root@core exp...

RealSecure / Blackice - 'iss_pam1.dll' Remote Overflow

/ 557isspamexp - RealSecure / Blackice ICQ isspam1.dll remote overflow exploit Copyright c SST 2004 All rights reserved. Public version code by Sam Sam@efnet and 2004/03/26 Compile: gcc -o 557isspamexp 557isspamexp.c how works? root@core exp ./557isspamexp 192.168.10.2 192.168.10.169 5570...

CVE-2004-0362

CVE-2004-0362 affects ISS PAM ICQ parsing in RealSecure/BlackICE/Proventia products. The issue is multiple stack-based buffer overflows in the ICQ server response handling (SRV_MULTI carrying SRV_USER_ONLINE/SRV_META_USER with long nickname/firstname/lastname/email), enabling remote code executio...

ISS Security Brief: Vulnerability in ICQ Parsing in ISS Products

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Brief March 18, 2004 Vulnerability in ICQ Parsing in ISS Products Synopsis: A vulnerability was discovered in the ICQ instant messaging protocol parsing routines of the ISS Protocol Analysis Module PAM component. The PAM module...

ISS BlackICE Multiple Remote Vulnerabilities

ISS BlackICE is a personal Firewall/IDS for windows Desktops. Several remote holes have been found in the product. An attacker, exploiting these flaws, would be able to either crash the remote firewall/IDS service or execute code on the target machine. According to the remote version number, the...