Iss

Blackice Server Protection

7 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2006-3840

  • EPSS 4.12%
  • Published 27.07.2006 11:04:00
  • Last modified 03.04.2025 01:03:51

The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause...

7.2

CVE-2005-2711

  • EPSS 0.06%
  • Published 31.12.2005 05:00:00
  • Last modified 03.04.2025 01:03:51

ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, and RealSecure Desktop 3.6 and 7.0, does not drop privileges before launching help from the "More Info" button in the "Application P...

4.6

CVE-2004-2125

  • EPSS 0.12%
  • Published 31.12.2004 05:00:00
  • Last modified 03.04.2025 01:03:51

Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with application protection off, allows local users to gain system privileges by modifying the .INI file to contain a long packetLog.fileprefix value.

7.1

CVE-2004-1714

Exploit
  • EPSS 0.14%
  • Published 11.08.2004 04:00:00
  • Last modified 03.04.2025 01:03:51

BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.ini with Everyone Full Control permissions, which allows local users to cause a denial of service (crash) or modify configuration, ...

7.5

CVE-2004-0362

Exploit
  • EPSS 83.4%
  • Published 15.04.2004 04:00:00
  • Last modified 03.04.2025 01:03:51

Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various RealSecure, Proventia, and BlackICE products, allow remote attackers to execute arbitrary code via a SRV_MULTI r...

7.5

CVE-2004-0193

  • EPSS 28.45%
  • Published 15.03.2004 05:00:00
  • Last modified 03.04.2025 01:03:51

Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A, G, and M Series, RealSecure Desktop 7.0 and 3.6, RealSecure Guard 3.6, RealSecure Sentry 3...

4.3

CVE-2003-1527

Exploit
  • EPSS 0.93%
  • Published 31.12.2003 05:00:00
  • Last modified 03.04.2025 01:03:51

BlackICE Defender 2.9.cap and Server Protection 3.5.cdf, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets.