[24096] in bugtraq
Vulnerability in Black ICE Defender
daemon@ATHENA.MIT.EDU (Matt Taylor)
Mon Feb 4 18:40:10 2002
Date: Sun, 3 Feb 2002 22:26:50 -0600
Message-ID: <FBENKNOOBHAACDEDGCNKKEFJCAAA.quisit@quest.net>
From: "Matt Taylor" <quisit@quest.net>
To: bugtraq@securityfocus.com
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
The current version of BlackICE Defender (2.9.caq and 2.9.cap) running on a
Windows 2000 machine can be remotely crashed using a very basic ping flood.
This has been tested with Divine Intervention 2 & 3, Sisoft Sandra Network
(LAN) benchmark.
Setting the packet size to about 10,000 bytes causes a Blue Screen of Death
(or immediate system reboot). After extensive correspondence with ISS
support they basically told me they'd "look into it." They have not
responded since 12/21/01 and their newest patch 2.9.caq (released after)
does not address this issue. More details available if requested.
Matt Taylor
