CVE-2002-0957: Medium severity iss BlackICE Agent vulnerability

Published Aug 31, 2002

Updated

The default configuration of BlackICE Agent 3.1.eal and 3.1.ebh has a high tcp.maxconnections setting, which could allow remote attackers to cause a denial of service (memory consumption) via a large number of connections to the BlackICE system that consumes more resources than intended by the user.

Affected Software

2 affected components

iss BlackICE Agent=3.1eal

iss BlackICE Agent=3.1ebh

Remediation

Patch Available

http://www.iss.net/security_center/static/9405.php

Event History

Aug 31, 2002

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-0957?

CVE-2002-0957 has been classified as having a high severity due to its potential for causing a denial of service.

How do I fix CVE-2002-0957?

To fix CVE-2002-0957, users should lower the tcp.maxconnections setting in the BlackICE Agent configuration.

What systems are affected by CVE-2002-0957?

CVE-2002-0957 affects BlackICE Agent versions 3.1.eal and 3.1.ebh.

What type of vulnerability is CVE-2002-0957?

CVE-2002-0957 is a resource consumption vulnerability that can lead to denial of service.

Can CVE-2002-0957 be exploited remotely?

Yes, CVE-2002-0957 can be exploited remotely by initiating a large number of connections to the BlackICE system.