CVE-2006-3999
CVE-2006-3999 is a medium-severity vulnerability in Iss Blackice Pc Protection with a CVSS 2.0 base score of 4.6. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 2.0 base score 4.6)
- EPSS exploit prediction: 0% (25th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Iss Blackice Pc Protection
- Published:
- Last modified:
Description
ISS BlackICE PC Protection 3.6.cpj, 3.6.cpiE, and possibly earlier versions do not properly monitor the integrity of the pamversion.dll BlackICE library, which allows local users to subvert BlackICE by replacing pamversion.dll. NOTE: in most cases, the attack would not cross privilege boundaries because replacing pamversion.dll requires administrative privileges. However, this issue is a vulnerability because BlackICE is intended to protect against certain rogue privileged actions.
Frequently asked questions
- What is CVE-2006-3999?
- ISS BlackICE PC Protection 3.6.cpj, 3.6.cpiE, and possibly earlier versions do not properly monitor the integrity of the pamversion.dll BlackICE library, which allows local users to subvert BlackICE by replacing pamversion.dll. NOTE: in most cases, the attack would not cross privilege boundaries because replacing pamversion.dll requires administrative privileges. However, this issue is a vulnerability because BlackICE is intended to protect against certain rogue privileged actions.
- How severe is CVE-2006-3999?
- CVE-2006-3999 has a CVSS 2.0 base score of 4.6, rated medium severity.
- Is CVE-2006-3999 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (25th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2006-3999?
- CVE-2006-3999 primarily affects Iss Blackice Pc Protection. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2006-3999?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2006-3999 published?
- CVE-2006-3999 was published on 2006-08-05 and last updated on 2026-06-16.
References
- http://securityreason.com/securityalert/1338
- http://securitytracker.com/id?1016618
- http://www.securityfocus.com/archive/1/441829/100/0/threaded
Affected products (2)
- cpe:2.3:a:iss:blackice_pc_protection:3.6cpie:*:*:*:*:*:*:*
- cpe:2.3:a:iss:blackice_pc_protection:3.6cpj:*:*:*:*:*:*:*
More vulnerabilities in Iss Blackice Pc Protection
- CVE-2004-0362 — High (CVSS 7.5): Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component,…
- CVE-2004-0193 — High (CVSS 7.5): Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network…
- CVE-2005-2711 — High (CVSS 7.2): ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server,…
- CVE-2004-1714 — High (CVSS 7.1): BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4)…
- CVE-2006-3840 — Medium (CVSS 5.0): The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including…
- CVE-2006-4541 — Medium (CVSS 4.6): RapDrv.sys in BlackICE PC Protection 3.6.cpn, cpj, cpiE, and possibly 3.6 and earlier, allows local users to cause a…