CVEvulnerability
CVE-2004-2125
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Description
Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with application protection off, allows local users to gain system privileges by modifying the .INI file to contain a long packetLog.fileprefix value.
Affected configurations
• iss blackice agent server 3.6eca
• iss blackice pc protection 3.6cbd
• iss blackice server protection 3.6cbz
• iss realsecure desktop 3.6eca
• iss realsecure desktop 7.0ebg
References
- http://archives.neohapsis.com/archives/iss/2004-q1/0157.html archives.neohapsis.com
- http://marc.info/?l=bugtraq&m=107530966524193&w=2 marc.info
- http://secunia.com/advisories/10739 secunia.com
- http://www.osvdb.org/3740 www.osvdb.org
- http://www.securityfocus.com/bid/9514 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14965 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/iss/2004-q1/0157.html archives.neohapsis.com
- http://marc.info/?l=bugtraq&m=107530966524193&w=2 marc.info
- http://secunia.com/advisories/10739 secunia.com
- http://www.osvdb.org/3740 www.osvdb.org
- http://www.securityfocus.com/bid/9514 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14965 exchange.xforce.ibmcloud.com