CVE-2005-2711
Summary
| CVE | CVE-2005-2711 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2005-12-31 05:00:00 UTC |
| Updated | 2017-07-11 01:32:00 UTC |
| Description | ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, and RealSecure Desktop 3.6 and 7.0, does not drop privileges before launching help from the "More Info" button in the "Application Protection" dialog, which allows local users to execute arbitrary programs as SYSTEM. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Iss | Blackice Agent Server | All | All | All | All |
| Application | Iss | Blackice Agent Server | All | All | All | All |
| Application | Iss | Blackice Pc Protection | 3.6 | All | All | All |
| Application | Iss | Blackice Pc Protection | 3.6cpu | All | All | All |
| Application | Iss | Blackice Pc Protection | 3.6 | All | All | All |
| Application | Iss | Blackice Pc Protection | 3.6cpu | All | All | All |
| Application | Iss | Blackice Server Protection | All | All | All | All |
| Application | Iss | Blackice Server Protection | All | All | All | All |
| Application | Iss | Realsecure Desktop | 3.6 | All | All | All |
| Application | Iss | Realsecure Desktop | 7.0 | All | All | All |
| Application | Iss | Realsecure Desktop | 3.6 | All | All | All |
| Application | Iss | Realsecure Desktop | 7.0 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Accenture | Let there be change | IDEFENSE | www.idefense.com | Vendor Advisory |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | |
| BlackICE Help System Lets Local Users Gain Elevated Privileges - SecurityTracker | SECTRACK | securitytracker.com | |
| 24096 | OSVDB | www.osvdb.org | |
| RealSecure Desktop Help System Lets Local Users Gain Elevated Privileges - SecurityTracker | SECTRACK | securitytracker.com | |
| Internet Security Systems BlackICE and RealSecure Desktop Local Privilege Escalation Vulnerability | BID | www.securityfocus.com | |
| Secunia - Advisories - ISS Products Application Protection Module Privilege Escalation | SECUNIA | secunia.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.