CVE-2006-3999 Information

Description

ISS BlackICE PC Protection 3.6.cpj 3.6.cpiE and possibly earlier versions do not properly monitor the integrity of the pamversion.dll BlackICE library which allows local users to subvert BlackICE by replacing pamversion.dll. NOTE: in most cases the attack would not cross privilege boundaries because replacing pamversion.dll requires administrative privileges. However this issue is a vulnerability because BlackICE is intended to protect against certain rogue privileged actions.

Reference

http://securityreason.com/securityalert/1338 http://securitytracker.com/id?1016618 http://www.securityfocus.com/archive/1/441829/100/0/threaded