CVE-2004-1714
Internet Security Systems BlackICE PC Protection 3.6 - Firewall.INI Local Buffer Overrun
Severity Score
7.1
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
2
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.ini with Everyone Full Control permissions, which allows local users to cause a denial of service (crash) or modify configuration, as demonstrated by modifying firewall.ini to contain a large firewall rule.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2004-08-11 CVE Published
- 2004-08-11 First Exploit
- 2005-02-26 CVE Reserved
- 2023-03-08 EPSS Updated
- 2024-08-08 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-732: Incorrect Permission Assignment for Critical Resource
CAPEC
References (5)
| URL | Tag | Source |
|---|---|---|
| http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025112.html | Mailing List | |
| http://marc.info/?l=bugtraq&m=109223751031166&w=2 | Mailing List | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/16959 | Third Party Advisory |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/24362 | 2004-08-11 | |
| http://www.securityfocus.com/bid/10915 | 2024-08-08 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Iss Search vendor "Iss" | Blackice Pc Protection Search vendor "Iss" for product "Blackice Pc Protection" | 3.6cbd Search vendor "Iss" for product "Blackice Pc Protection" and version "3.6cbd" | - |
Affected
| ||||||
| Iss Search vendor "Iss" | Blackice Pc Protection Search vendor "Iss" for product "Blackice Pc Protection" | 3.6cbr Search vendor "Iss" for product "Blackice Pc Protection" and version "3.6cbr" | - |
Affected
| ||||||
| Iss Search vendor "Iss" | Blackice Pc Protection Search vendor "Iss" for product "Blackice Pc Protection" | 3.6cbz Search vendor "Iss" for product "Blackice Pc Protection" and version "3.6cbz" | - |
Affected
| ||||||
| Iss Search vendor "Iss" | Blackice Pc Protection Search vendor "Iss" for product "Blackice Pc Protection" | 3.6cca Search vendor "Iss" for product "Blackice Pc Protection" and version "3.6cca" | - |
Affected
| ||||||
| Iss Search vendor "Iss" | Blackice Pc Protection Search vendor "Iss" for product "Blackice Pc Protection" | 3.6ccb Search vendor "Iss" for product "Blackice Pc Protection" and version "3.6ccb" | - |
Affected
| ||||||
| Iss Search vendor "Iss" | Blackice Pc Protection Search vendor "Iss" for product "Blackice Pc Protection" | 3.6ccc Search vendor "Iss" for product "Blackice Pc Protection" and version "3.6ccc" | - |
Affected
| ||||||
| Iss Search vendor "Iss" | Blackice Pc Protection Search vendor "Iss" for product "Blackice Pc Protection" | 3.6ccd Search vendor "Iss" for product "Blackice Pc Protection" and version "3.6ccd" | - |
Affected
| ||||||
| Iss Search vendor "Iss" | Blackice Pc Protection Search vendor "Iss" for product "Blackice Pc Protection" | 3.6cce Search vendor "Iss" for product "Blackice Pc Protection" and version "3.6cce" | - |
Affected
| ||||||
| Iss Search vendor "Iss" | Blackice Pc Protection Search vendor "Iss" for product "Blackice Pc Protection" | 3.6ccf Search vendor "Iss" for product "Blackice Pc Protection" and version "3.6ccf" | - |
Affected
| ||||||
| Iss Search vendor "Iss" | Blackice Pc Protection Search vendor "Iss" for product "Blackice Pc Protection" | 3.6ccg Search vendor "Iss" for product "Blackice Pc Protection" and version "3.6ccg" | - |
Affected
| ||||||
| Iss Search vendor "Iss" | Blackice Server Protection Search vendor "Iss" for product "Blackice Server Protection" | 3.5cdf Search vendor "Iss" for product "Blackice Server Protection" and version "3.5cdf" | - |
Affected
| ||||||
| Iss Search vendor "Iss" | Blackice Server Protection Search vendor "Iss" for product "Blackice Server Protection" | 3.6cbz Search vendor "Iss" for product "Blackice Server Protection" and version "3.6cbz" | - |
Affected
| ||||||
| Iss Search vendor "Iss" | Blackice Server Protection Search vendor "Iss" for product "Blackice Server Protection" | 3.6cca Search vendor "Iss" for product "Blackice Server Protection" and version "3.6cca" | - |
Affected
| ||||||
| Iss Search vendor "Iss" | Blackice Server Protection Search vendor "Iss" for product "Blackice Server Protection" | 3.6ccb Search vendor "Iss" for product "Blackice Server Protection" and version "3.6ccb" | - |
Affected
| ||||||
| Iss Search vendor "Iss" | Blackice Server Protection Search vendor "Iss" for product "Blackice Server Protection" | 3.6ccc Search vendor "Iss" for product "Blackice Server Protection" and version "3.6ccc" | - |
Affected
| ||||||
| Iss Search vendor "Iss" | Blackice Server Protection Search vendor "Iss" for product "Blackice Server Protection" | 3.6ccd Search vendor "Iss" for product "Blackice Server Protection" and version "3.6ccd" | - |
Affected
| ||||||
| Iss Search vendor "Iss" | Blackice Server Protection Search vendor "Iss" for product "Blackice Server Protection" | 3.6cce Search vendor "Iss" for product "Blackice Server Protection" and version "3.6cce" | - |
Affected
| ||||||
| Iss Search vendor "Iss" | Blackice Server Protection Search vendor "Iss" for product "Blackice Server Protection" | 3.6ccf Search vendor "Iss" for product "Blackice Server Protection" and version "3.6ccf" | - |
Affected
| ||||||
| Iss Search vendor "Iss" | Blackice Server Protection Search vendor "Iss" for product "Blackice Server Protection" | 3.6ccg Search vendor "Iss" for product "Blackice Server Protection" and version "3.6ccg" | - |
Affected
| ||||||
| Iss Search vendor "Iss" | Blackice Server Protection Search vendor "Iss" for product "Blackice Server Protection" | 3.6cch Search vendor "Iss" for product "Blackice Server Protection" and version "3.6cch" | - |
Affected
| ||||||
| Iss Search vendor "Iss" | Blackice Server Protection Search vendor "Iss" for product "Blackice Server Protection" | 3.6cno Search vendor "Iss" for product "Blackice Server Protection" and version "3.6cno" | - |
Affected
| ||||||