| Package | Affected versions | Patched versions |
|---|---|---|
| blackice pc protection | = 3.6cbd= 3.6cbr= 3.6cbz= 3.6cca= 3.6ccb= 3.6ccc= 3.6ccd= 3.6cce= 3.6ccf= 3.6ccg | |
| blackice server protection | = 3.5cdf= 3.6cbz= 3.6cca= 3.6ccb= 3.6ccc= 3.6ccd= 3.6cce= 3.6ccf= 3.6ccg= 3.6cch= 3.6cno |
BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.ini with Everyone Full Control permissions, which allows local users to cause a denial of service (crash) or modify configuration, as demonstrated by modifying firewall.ini to contain a large firewall rule.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free