CVE-2006-3999 Security feature bypass in n/a
Local attackers with administrative privileges can bypass BlackICE protections by replacing the pamversion.dll library, undermining the software's integrity monitoring.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2006-3999?
CVE-2006-3999 is a medium-severity vulnerability in n/a, published on 5 Aug 2006. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
ISS BlackICE PC Protection 3.6.cpj, 3.6.cpiE, and possibly earlier versions do not properly monitor the integrity of the pamversion.dll BlackICE library, which allows local users to subvert BlackICE by replacing pamversion.dll. NOTE: in most cases, the attack would not cross privilege boundaries because replacing pamversion.dll requires administrative privileges. However, this issue is a vulnerability because BlackICE is intended to protect against certain rogue privileged actions.
Which versions are affected by CVE-2006-3999?
It affects 1 product.
Products include Iss Blackice Pc Protection.
How do I fix CVE-2006-3999?
No fix has been published for CVE-2006-3999 yet. Limit exposure of the affected software until one is available.
Is CVE-2006-3999 being exploited?
There is no known exploitation of CVE-2006-3999 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-8xgh-w39h-4xhw.