CVE

Id
13917  
CVE No.
CVE-2005-2711  
Status
Candidate  
Description
ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, and RealSecure Desktop 3.6 and 7.0, does not drop privileges before launching help from the "More Info" button in the "Application Protection" dialog, which allows local users to execute arbitrary programs as SYSTEM.  
Phase
Assigned (20050826)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
102324 13917 CVE-2005-2711 IDEFENSE:20060323 ISS Multiple Products Local Privilege Escalation Vulnerability  View
102325 13917 CVE-2005-2711 URL:http://www.idefense.com/intelligence/vulnerabilities/display.php?id=403  View
102326 13917 CVE-2005-2711 BID:17218  View
102327 13917 CVE-2005-2711 URL:http://www.securityfocus.com/bid/17218  View
102328 13917 CVE-2005-2711 VUPEN:ADV-2006-1090  View
102329 13917 CVE-2005-2711 URL:http://www.vupen.com/english/advisories/2006/1090  View
102330 13917 CVE-2005-2711 OSVDB:24096  View
102331 13917 CVE-2005-2711 URL:http://www.osvdb.org/24096  View
102332 13917 CVE-2005-2711 SECTRACK:1015820  View
102333 13917 CVE-2005-2711 URL:http://securitytracker.com/id?1015820  View
102334 13917 CVE-2005-2711 SECTRACK:1015821  View
102335 13917 CVE-2005-2711 URL:http://securitytracker.com/id?1015821  View
102336 13917 CVE-2005-2711 SECUNIA:19327  View
102337 13917 CVE-2005-2711 URL:http://secunia.com/advisories/19327  View
102338 13917 CVE-2005-2711 XF:blackice-appprotection-privilege-escalation(25423)  View

Related JVN