Beveiligingsadvies

CVE-2006-3999

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2006-08-05 01:00:00

Laatst bijgewerkt 2024-08-07 18:48:39

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

ISS BlackICE PC Protection 3.6.cpj, 3.6.cpiE, and possibly earlier versions do not properly monitor the integrity of the pamversion.dll BlackICE library, which allows local users to subvert BlackICE by replacing pamversion.dll. NOTE: in most cases, the attack would not cross privilege boundaries because replacing pamversion.dll requires administrative privileges. However, this issue is a vulnerability because BlackICE is intended to protect against certain rogue privileged actions.

← Alle CVE's bekijken Bekijk op cve.org ↗