CVE-2006-7129
First published: Tue Mar 06 2007(Updated: )
ISS BlackICE PC Protection 3.6 cpj and cpu, and possibly earlier versions, allows local users to bypass the protection scheme by using the ZwDeleteFile API function to delete the critical filelock.txt file, which stores information about protected files.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM ISS BlackICE PC Protection | =3.6cpj | |
| IBM ISS BlackICE PC Protection | =3.6cpu |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0298.html
- http://www.matousec.com/info/advisories/BlackICE-Filelock-protection-bypass.php
- http://www.securityfocus.com/bid/20546
- http://www.osvdb.org/30901
- http://securityreason.com/securityalert/2361
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29575
- http://www.securityfocus.com/archive/1/448763/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2006-7129?
CVE-2006-7129 is classified as a high severity vulnerability due to the potential for local users to bypass critical protection mechanisms.
How do I fix CVE-2006-7129?
Fixing CVE-2006-7129 involves upgrading to a later version of ISS BlackICE PC Protection that addresses this vulnerability.
Who is affected by CVE-2006-7129?
CVE-2006-7129 affects users of ISS BlackICE PC Protection versions 3.6 cpj and 3.6 cpu, and possibly earlier versions.
What kind of attack does CVE-2006-7129 enable?
CVE-2006-7129 allows an attacker with local access to delete the filelock.txt, thereby bypassing the file protection scheme.
Is there any workaround for CVE-2006-7129?
Currently, there are no known workarounds for CVE-2006-7129; upgrading to a secure version is necessary to mitigate the risk.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/last-modified-date
- agent/author
- agent/severity
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/iss
- canonical/ibm iss blackice pc protection
- version/ibm iss blackice pc protection/3.6cpj
- version/ibm iss blackice pc protection/3.6cpu