CVE-2006-3999
Published Aug 5, 2006
Last updated 6 years ago
Overview
- Description
- ISS BlackICE PC Protection 3.6.cpj, 3.6.cpiE, and possibly earlier versions do not properly monitor the integrity of the pamversion.dll BlackICE library, which allows local users to subvert BlackICE by replacing pamversion.dll. NOTE: in most cases, the attack would not cross privilege boundaries because replacing pamversion.dll requires administrative privileges. However, this issue is a vulnerability because BlackICE is intended to protect against certain rogue privileged actions.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.6
- Impact score
- 6.4
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:iss:blackice_pc_protection:3.6cpie:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "57807099-784E-4CA8-BA6C-BC4BF15DEDC0"
},
{
"criteria": "cpe:2.3:a:iss:blackice_pc_protection:3.6cpj:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0EA7FE32-A0F1-47DD-A306-E0369093083C"
}
],
"operator": "OR"
}
]
}
]