CPE Details
Internet Security Systems BlackICE Server Protection 3.6cpk
3.6cpk
2007-08-23
19h16 +00:00
19h16 +00:00
2008-03-25
18h15 +00:00
18h15 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:iss:blackice_server_protection:3.6cpk:*:*:*:*:*:*:*
Informations
Vendor
issProduct
blackice_server_protectionVersion
3.6cpkRelated CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service (infinite loop) via a crafted SMB packet that is not properly handled by the SMB_Mailslot_Heap_Overflow decode. | 5 |
|||
| ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, and RealSecure Desktop 3.6 and 7.0, does not drop privileges before launching help from the "More Info" button in the "Application Protection" dialog, which allows local users to execute arbitrary programs as SYSTEM. | 7.2 |
