CVE-2006-7129 - Vulnerability Details - OpenCVE

ISS BlackICE PC Protection 3.6 cpj and cpu, and possibly earlier versions, allows local users to bypass the protection scheme by using the ZwDeleteFile API function to delete the critical filelock.txt file, which stores information about protected files.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Iss	Blackice Pc Protection

Configuration 1 [-]

OR	cpe:2.3:a:iss:blackice_pc_protection:3.6cpj:::::::*
	cpe:2.3:a:iss:blackice_pc_protection:3.6cpu:::::::*

No data.

References

Link	Providers
http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0298.html
http://securityreason.com/securityalert/2361
http://www.matousec.com/info/advisories/BlackICE-Filelock-protection-bypass.php
http://www.osvdb.org/30901
http://www.securityfocus.com/archive/1/448763/100/0/threaded
http://www.securityfocus.com/bid/20546
https://exchange.xforce.ibmcloud.com/vulnerabilities/29575

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-03-06T01:00:00

Updated: 2024-08-07T20:50:06.200Z

Reserved: 2007-03-05T00:00:00

Link: CVE-2006-7129

Vulnrichment

No data.

NVD

Status : Modified

Published: 2007-03-06T01:19:00.000

Modified: 2024-11-21T00:24:27.663

Link: CVE-2006-7129

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-10-15T00:00:00", "descriptions": [{"lang": "en", "value": "ISS BlackICE PC Protection 3.6 cpj and cpu, and possibly earlier versions, allows local users to bypass the protection scheme by using the ZwDeleteFile API function to delete the critical filelock.txt file, which stores information about protected files."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-16T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "20061015 ISS BlackICE PC Protection Filelock protection bypass Vulnerability", "tags": ["mailing-list", "x_refsource_FULLDISC"], "url": "http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0298.html"}, {"name": "2361", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/2361"}, {"name": "20546", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/20546"}, {"name": "30901", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/30901"}, {"name": "20061015 ISS BlackICE PC Protection Filelock protection bypass Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/448763/100/0/threaded"}, {"name": "blackice-filelock-protection-bypass(29575)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29575"}, {"tags": ["x_refsource_MISC"], "url": "http://www.matousec.com/info/advisories/BlackICE-Filelock-protection-bypass.php"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-7129", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "ISS BlackICE PC Protection 3.6 cpj and cpu, and possibly earlier versions, allows local users to bypass the protection scheme by using the ZwDeleteFile API function to delete the critical filelock.txt file, which stores information about protected files."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20061015 ISS BlackICE PC Protection Filelock protection bypass Vulnerability", "refsource": "FULLDISC", "url": "http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0298.html"}, {"name": "2361", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/2361"}, {"name": "20546", "refsource": "BID", "url": "http://www.securityfocus.com/bid/20546"}, {"name": "30901", "refsource": "OSVDB", "url": "http://www.osvdb.org/30901"}, {"name": "20061015 ISS BlackICE PC Protection Filelock protection bypass Vulnerability", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/448763/100/0/threaded"}, {"name": "blackice-filelock-protection-bypass(29575)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29575"}, {"name": "http://www.matousec.com/info/advisories/BlackICE-Filelock-protection-bypass.php", "refsource": "MISC", "url": "http://www.matousec.com/info/advisories/BlackICE-Filelock-protection-bypass.php"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T20:50:06.200Z"}, "title": "CVE Program Container", "references": [{"name": "20061015 ISS BlackICE PC Protection Filelock protection bypass Vulnerability", "tags": ["mailing-list", "x_refsource_FULLDISC", "x_transferred"], "url": "http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0298.html"}, {"name": "2361", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/2361"}, {"name": "20546", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/20546"}, {"name": "30901", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/30901"}, {"name": "20061015 ISS BlackICE PC Protection Filelock protection bypass Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/448763/100/0/threaded"}, {"name": "blackice-filelock-protection-bypass(29575)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29575"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.matousec.com/info/advisories/BlackICE-Filelock-protection-bypass.php"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-7129", "datePublished": "2007-03-06T01:00:00", "dateReserved": "2007-03-05T00:00:00", "dateUpdated": "2024-08-07T20:50:06.200Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:iss:blackice_pc_protection:3.6cpj:*:*:*:*:*:*:*", "matchCriteriaId": "0EA7FE32-A0F1-47DD-A306-E0369093083C", "vulnerable": true}, {"criteria": "cpe:2.3:a:iss:blackice_pc_protection:3.6cpu:*:*:*:*:*:*:*", "matchCriteriaId": "8EE7A456-FD11-4506-8015-677CDD8912D1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "ISS BlackICE PC Protection 3.6 cpj and cpu, and possibly earlier versions, allows local users to bypass the protection scheme by using the ZwDeleteFile API function to delete the critical filelock.txt file, which stores information about protected files."}, {"lang": "es", "value": "ISS BlackICEPC Protection 3.6 cpj y cpu, y posiblemente versiones anteriores, permite a usuarios locales evitar el esquema de protecci\u00f3n utilizando la funci\u00f3n ZwDeleteFile del API para borrar el archivo cr\u00edtico filelock.txt, el cual almacena informaci\u00f3n sobre archivos protegidos."}], "id": "CVE-2006-7129", "lastModified": "2024-11-21T00:24:27.663", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-03-06T01:19:00.000", "references": [{"source": "cve@mitre.org", "url": "http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0298.html"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/2361"}, {"source": "cve@mitre.org", "url": "http://www.matousec.com/info/advisories/BlackICE-Filelock-protection-bypass.php"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/30901"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/448763/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/20546"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29575"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0298.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/2361"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.matousec.com/info/advisories/BlackICE-Filelock-protection-bypass.php"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/30901"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/448763/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/20546"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29575"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}