CVE-2004-0362

CVE-2004-0362 affects ISS PAM ICQ parsing in RealSecure/BlackICE/Proventia products. The issue is multiple stack-based buffer overflows in the ICQ server response handling (SRV_MULTI carrying SRV_USER_ONLINE/SRV_META_USER with long nickname/firstname/lastname/email), enabling remote code executio...

CVE-2006-3840

The CVE-2006-3840 issue affects ISS RealSecure/BlackICE products and related PAM SMB Mailslot parsing. A crafted SMB_Mailslot_Heap_Overflow payload can trigger an infinite loop in the detection code, causing remote DoS with potential client/system unresponsiveness. Affected products include RealS...

CVE-2004-2126

CVE-2004-2126 affects BlackICE PC Protection 3.6 and earlier. The upgrade sets insecure permissions on INI files (blackice.ini, firewall.ini, protect.ini, sigs.ini), allowing local users to modify BlackICE configuration and, via vulnerabilities in the INI parsers, potentially execute arbitrary co...

CVE-2004-0193

CVE-2004-0193 describes a heap-based buffer overflow in the ISS Protocol Analysis Module (PAM) used by RealSecure/BlackICE products. An SMB authentication request with a long username allows a remote attacker to execute arbitrary code. Affected: RealSecure Network 7.0 and Server Sensor 7.0, Prove...

CVE-2005-2711

ISS BlackIce 3.6 and related products (BlackICE PC Protection, BlackICE Server Protection, BlackICE Agent for Server, RealSecure Desktop 3.6/7.0) are affected by a local privilege escalation vulnerability. The root cause is that the Application Protection module does not drop privileges before la...

CVE-2006-4541

CVE-2006-4541 affects RapDrv.sys in BlackICE PC Protection 3.6.x and earlier variants, where a NULL third argument passed to NtOpenSection can crash the system, enabling local denial of service. The vulnerability is tied to the driver’s handling of NtOpenSection arguments. No exploitation details...

CVE-2004-1714

CVE-2004-1714 affects BlackICE PC Protection and Server Protection. The issue arises from installation of firewall.ini, blackice.ini, sigs.ini, and protect.ini with Everyone Full Control permissions, enabling a local attacker to crash the service or modify configuration by editing firewall.ini (e...

CVE-2004-2125

The CVE-2004-2125 entry describes a local privilege escalation in BlackICE PC Protection before 3.6.ccb, caused by a buffer overflow in blackd.exe when a long packetLog.fileprefix value is written into the application’s INI file. Affected product: BlackICE PC Protection 3.6 and earlier (3.6.ccb)....

CVE-2006-7129

CVE-2006-7129 concerns ISS BlackICE PC Protection 3.6 cpj and possibly earlier versions. The issue allows local users to bypass the protection scheme by calling ZwDeleteFile to delete the critical filelock.txt, which stores information about protected files. The root cause is tampering with the f...

CVE-2006-3999

ISS BlackICE PC Protection 3.6.cpj, 3.6.cpiE (and possibly earlier) are vulnerable due to improper integrity checking of the pamversion.dll BlackICE library, allowing local users to subvert BlackICE by replacing pamversion.dll. The attack would generally require administrative privileges to repla...