Skip to content
High Published: Aug 11, 2004 Modified: Apr 03, 2025

CVE-2004-1714

7.1 CVSS Score High
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Export CVE-2004-1714 Data:
Share:
Link copied!

Description

BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.ini with Everyone Full Control permissions, which allows local users to cause a denial of service (crash) or modify configuration, as demonstrated by modifying firewall.ini to contain a large firewall rule.

CVSS Vector Details

Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity High
Availability High

Affected Software Configurations

  • a iss blackice_pc_protection 3.6cbd * * * * * * *
  • a iss blackice_pc_protection 3.6cbr * * * * * * *
  • a iss blackice_pc_protection 3.6cbz * * * * * * *
  • a iss blackice_pc_protection 3.6cca * * * * * * *
  • a iss blackice_pc_protection 3.6ccb * * * * * * *
  • a iss blackice_pc_protection 3.6ccc * * * * * * *
  • a iss blackice_pc_protection 3.6ccd * * * * * * *
  • a iss blackice_pc_protection 3.6cce * * * * * * *
  • a iss blackice_pc_protection 3.6ccf * * * * * * *
  • a iss blackice_pc_protection 3.6ccg * * * * * * *

Weaknesses (CWE)

  • CWE-732

References & External Links

External Resources

NVD Official Record Exploit-DB Search Exploits CVE Details Statistics GitHub PoC / Tools X / Twitter Discussions Google Search More

Related Vulnerabilities

CVE-2001-0006 CVSS 7.1 Same weakness: CWE-732 CVE-2005-4868 CVSS 7.1 Same weakness: CWE-732 CVE-2007-5544 CVSS 7.8 Same weakness: CWE-732 CVE-2007-6033 CVSS 8.8 Same weakness: CWE-732 CVE-2008-0662 CVSS 7.8 Same weakness: CWE-732

CVE History Timeline

May 31, 2005 15:28 Initial Analysis
Oct 18, 2016 02:59 CVE Modified
Jul 11, 2017 01:31 CVE Modified
Jan 26, 2024 17:21 Modified Analysis
May 14, 2024 01:26 CVE Modified
Nov 20, 2024 23:51 CVE Modified
← Back to CVE Tracker