vulnwire
2.1low

CVE-2006-71291 exploit

ISS BlackICE PC Protection 3.6 cpj and cpu, and possibly earlier versions, allows local users to bypass the protection scheme by using the…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
2.1
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.8%
percentile 56%
Public exploits
1
Exploit-DB

ISS BlackICE PC Protection 3.6 cpj and cpu, and possibly earlier versions, allows local users to bypass the protection scheme by using the ZwDeleteFile API function to delete the critical filelock.txt file, which stores information about protected files.

Exploit prediction (EPSS)

0.78% probability of exploitation in the next 30 days, higher than 56% of all scored CVEs.

Exploits and detections

  • EDB-28817 Internet Security Systems 3.6 - 'ZWDeleteFile()' Arbitrary File Deletion · local · 2006-10-16

CVSS scores

Assigned byVersionScoreVector
NVD2.02.1AV:L/AC:L/Au:N/C:N/I:P/A:N

References

  • archives.neohapsis.com /archives/fulldisclosure/2006-10/0298.html · mailing-list, x_refsource_FULLDISC, x_transferred
  • securityreason.com /securityalert/2361 · third-party-advisory, x_refsource_SREASON, x_transferred
  • securityfocus.com /bid/20546 · vdb-entry, x_refsource_BID, x_transferred
  • osvdb.org /30901 · vdb-entry, x_refsource_OSVDB, x_transferred
  • securityfocus.com /archive/1/448763/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/29575 · vdb-entry, x_refsource_XF, x_transferred
  • matousec.com /info/advisories/BlackICE-Filelock-protection-bypass.php · x_refsource_MISC, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.