Internet Security Systems ZWDeleteFile Function Arbitrary File Deletion Vulnerability

Bugtraq ID:	20546
Class:	Design Error
CVE:	CVE-2006-7129
Remote:	No
Local:	Yes
Published:	Oct 16 2006 12:00AM
Updated:	Jul 06 2016 02:40PM
Credit:	Matousec Transparent security Research is credited with the discovery of this vulnerability.
Vulnerable:	Internet Security Systems BlackICE PC Protection 3.6.cpu Internet Security Systems BlackICE PC Protection 3.6.cpj
Not Vulnerable:

Internet Security Systems ZWDeleteFile Function Arbitrary File Deletion Vulnerability

Internet Security Systems (ISS) BlackICE PC Protection is prone to a file-deletion vulnerability.

An attacker can exploit this issue to delete arbitrary files within the context of the affected application. This could lead to other attacks.

Versions 3.6.cpu, 3.6.cpj are vulnerable to this issue; other versions may also be affected.

Internet Security Systems ZWDeleteFile Function Arbitrary File Deletion Vulnerability

The following proof of concept demonstrates this issue:

• /data/vulnerabilities/exploits/20546.zip

Internet Security Systems ZWDeleteFile Function Arbitrary File Deletion Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Internet Security Systems ZWDeleteFile Function Arbitrary File Deletion Vulnerability

References:

• BlackICE Homepage (Internet Security Systems)
  
• ISS BlackICE PC Protection Filelock protection bypass Vulnerability (Matousec - Transparent security Research )