CVE-2004-2126

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-12-31 · updated 2026-06-16

Description

The upgrade for BlackICE PC Protection 3.6 and earlier sets insecure permissions for .INI files such as (1) blackice.ini, (2) firewall.ini, (3) protect.ini, or (4) sigs.ini, which allows local users to modify BlackICE configuration or possibly execute arbitrary code by exploiting vulnerabilities in the .INI parsers.

Affected products

ISS Blackice Pc Protection: through 3.6cbz

References

http://marc.info/?l=bugtraq&m=107530966524193&w=2
http://www.securityfocus.com/bid/9513
http://marc.info/?l=bugtraq&m=107530966524193&w=2
http://www.securityfocus.com/bid/9513

Get alerted when CVE-2004-2126 or the next vulnerability affects your stack