CVE-2004-2125: Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with applicati

Routine

MEDIUM 4.6DOWNGRADEDOWNGRADEDOWNGRADE

CVE-2004-2125 is a medium-severity flaw (CVSS 4.6) affecting blackice agent server, blackice pc protection, blackice server protection. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with application protection off, allows local users to gain system privileges by modifying the .INI file to contain a long packetLog.fileprefix value.

Why this priority

No elevated risk signals yet

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	4.6 (Medium)
EPSS exploit chance	0.4% (top 64%)
CISA exploited list	No
Published	2004-12-31
Last modified	2026-06-16

Publisher (CNA): MITRE · Vendor: iss

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2004-12-31 05:00 UTCPublished CVE record published
2026-06-16 22:09 UTCUpdated Record last modified

iss blackice agent server DOWNGRADE

Affected: 3.6eca

Fixed in: no fixed release known

Safe to downgrade to: a release before 3.6eca

1. Check installed version

apt-cache policy blackice-agent-server || rpm -q blackice-agent-server || blackice-agent-server --version

2. No fixed release: DOWNGRADE to a release before 3.6eca (Debian / Ubuntu)

apt-cache madison blackice-agent-server sudo apt install blackice-agent-server=<VERSION_BEFORE_3.6eca> sudo apt-mark hold blackice-agent-server

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list blackice-agent-server sudo dnf downgrade blackice-agent-server-<VERSION_BEFORE_3.6eca> sudo dnf versionlock add blackice-agent-server

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

iss blackice pc protection DOWNGRADE

Affected: 3.6cbd

Fixed in: no fixed release known

Safe to downgrade to: a release before 3.6cbd

1. Check installed version

apt-cache policy blackice-pc-protection || rpm -q blackice-pc-protection || blackice-pc-protection --version

2. No fixed release: DOWNGRADE to a release before 3.6cbd (Debian / Ubuntu)

apt-cache madison blackice-pc-protection sudo apt install blackice-pc-protection=<VERSION_BEFORE_3.6cbd> sudo apt-mark hold blackice-pc-protection

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list blackice-pc-protection sudo dnf downgrade blackice-pc-protection-<VERSION_BEFORE_3.6cbd> sudo dnf versionlock add blackice-pc-protection

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

iss blackice server protection DOWNGRADE

Affected: 3.6cbz

Fixed in: no fixed release known

Safe to downgrade to: a release before 3.6cbz

1. Check installed version

apt-cache policy blackice-server-protection || rpm -q blackice-server-protection || blackice-server-protection --version

2. No fixed release: DOWNGRADE to a release before 3.6cbz (Debian / Ubuntu)

apt-cache madison blackice-server-protection sudo apt install blackice-server-protection=<VERSION_BEFORE_3.6cbz> sudo apt-mark hold blackice-server-protection

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list blackice-server-protection sudo dnf downgrade blackice-server-protection-<VERSION_BEFORE_3.6cbz> sudo dnf versionlock add blackice-server-protection

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

iss realsecure desktop DOWNGRADE

Affected: 3.6eca · 7.0ebg

Fixed in: no fixed release known

Safe to downgrade to: a release before 3.6eca

1. Check installed version

apt-cache policy realsecure-desktop || rpm -q realsecure-desktop || realsecure-desktop --version

2. No fixed release: DOWNGRADE to a release before 3.6eca (Debian / Ubuntu)

apt-cache madison realsecure-desktop sudo apt install realsecure-desktop=<VERSION_BEFORE_3.6eca> sudo apt-mark hold realsecure-desktop

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list realsecure-desktop sudo dnf downgrade realsecure-desktop-<VERSION_BEFORE_3.6eca> sudo dnf versionlock add realsecure-desktop

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2004-2125?

blackice agent server: downgrade or apply the listed mitigation; blackice pc protection: downgrade or apply the listed mitigation; blackice server protection: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2004-2125 being exploited?

CVE-2004-2125 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2004-2125 affect?

CVE-2004-2125 affects blackice agent server, blackice pc protection, blackice server protection. Severity is medium (CVSS 4.6). Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with application protection off, allows local users to gain system privileges by modifying the .INI file to contain a long packetLog.fileprefix

How urgent is CVE-2004-2125?

Priority 25/100. No elevated risk signals yet.

Related CVEs

CVE-2005-2711 HIGH 7.2 MITIGATE DOWNGRADE ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for
CVE-2004-0362 HIGH 7.5 DOWNGRADE DOWNGRADE Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) co
CVE-2004-0193 HIGH 7.5 DOWNGRADE DOWNGRADE Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecur

References

← Back to latest CVEs