Unscored severity · published Dec 31, 2004
CVE-2004-2125
Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with application protection off, allows local users to gain system privileges by…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with application protection off, allows local users to gain system privileges by modifying the .INI file to contain a long packetLog.fileprefix value.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 36% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BA
Blackice Agent Server · Iss
3.6eca · source: NVD
BP
Blackice PC Protection · Iss
3.6cbd · source: NVD
BS
Blackice Server Protection · Iss
3.6cbz · source: NVD
RD
Realsecure Desktop · Iss
3.6eca; 7.0ebg · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-2125
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-2125
archives.neohapsis.com
http://archives.neohapsis.com/archives/iss/2004-q1/0157.html
marc.info
http://marc.info/?l=bugtraq&m=107530966524193&w=2
secunia.com
http://secunia.com/advisories/10739
www.osvdb.org
http://www.osvdb.org/3740
www.securityfocus.com
http://www.securityfocus.com/bid/9514
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/14965
More from Blackice Agent Server
–
CVE-2005-2711
ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, and RealSecure Desktop 3.6 and 7.0, does not drop privileges…
–
CVE-2004-0362
Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various RealSecure, Proventia, and BlackICE…
–
CVE-2004-0193
Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A, G, and M Series,…