« Volver al listado

CVE-2005-2711

Estado: ModificadaAlta (7.2)—

ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, and RealSecure Desktop 3.6 and 7.0, does not drop privileges before launching help from the "More Info" button in the "Application Protection" dialog, which allows local users to execute arbitrary programs as SYSTEM.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

ISS — Blackice Agent ServerISS — Blackice PC ProtectionISS — Blackice Server ProtectionISS — Realsecure Desktop

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2005-2711",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.2,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2005-12-31T05:00:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/19327",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1015820",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1015821",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=403",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/24096",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/17218",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/1090",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25423",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/19327",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1015820",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1015821",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.idefense.com/intelligence/vulnerabilities/display.php?id=403",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/24096",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/17218",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/1090",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25423",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, and RealSecure Desktop 3.6 and 7.0, does not drop privileges before launching help from the \"More Info\" button in the \"Application Protection\" dialog, which allows local users to execute arbitrary programs as SYSTEM."
    }
  ],
  "lastModified": "2026-06-16T22:15:31.973",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:iss:blackice_agent_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "15D811B9-6F92-4BEF-B502-7CBA79D90056"
            },
            {
              "criteria": "cpe:2.3:a:iss:blackice_pc_protection:3.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AE67F5C0-C165-446B-A67D-71876965F3EA"
            },
            {
              "criteria": "cpe:2.3:a:iss:blackice_pc_protection:3.6cpu:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8EE7A456-FD11-4506-8015-677CDD8912D1"
            },
            {
              "criteria": "cpe:2.3:a:iss:blackice_server_protection:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4DC89FBB-BC07-421F-BC6D-0582CFA98E16"
            },
            {
              "criteria": "cpe:2.3:a:iss:realsecure_desktop:3.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "40DB2F47-5FF4-47AD-AD9B-CB665B1957FC"
            },
            {
              "criteria": "cpe:2.3:a:iss:realsecure_desktop:7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7EBD8328-8261-43DE-B90C-160CE823BE12"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}