CVEvulnerability
CVE-2006-7129
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2007-03-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
Description
ISS BlackICE PC Protection 3.6 cpj and cpu, and possibly earlier versions, allows local users to bypass the protection scheme by using the ZwDeleteFile API function to delete the critical filelock.txt file, which stores information about protected files.
Affected configurations
• iss blackice pc protection 3.6cpj
• iss blackice pc protection 3.6cpu
References
- http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0298.html archives.neohapsis.com
- http://securityreason.com/securityalert/2361 securityreason.com
- http://www.matousec.com/info/advisories/BlackICE-Filelock-protection-bypass.php www.matousec.com
- http://www.osvdb.org/30901 www.osvdb.org
- http://www.securityfocus.com/archive/1/448763/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20546 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29575 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0298.html archives.neohapsis.com
- http://securityreason.com/securityalert/2361 securityreason.com
- http://www.matousec.com/info/advisories/BlackICE-Filelock-protection-bypass.php www.matousec.com
- http://www.osvdb.org/30901 www.osvdb.org
- http://www.securityfocus.com/archive/1/448763/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20546 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29575 exchange.xforce.ibmcloud.com