CVE-2005-2711: ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for

Routine

HIGH 7.2MITIGATEDOWNGRADEMITIGATE

CVE-2005-2711 is a high-severity flaw (CVSS 7.2) affecting blackice agent server, blackice pc protection, blackice server protection. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, and RealSecure Desktop 3.6 and 7.0, does not drop privileges before launching help from the "More Info" button in the "Application Protection" dialog, which allows local users to execute arbitrary programs as SYSTEM.

Why this priority

High severity

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	7.2 (High)
EPSS exploit chance	0.4% (top 69%)
CISA exploited list	No
Published	2005-12-31
Last modified	2026-06-16

Publisher (CNA): MITRE · Vendor: iss

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2005-12-31 05:00 UTCPublished CVE record published
2026-06-16 22:15 UTCUpdated Record last modified

iss blackice agent server MITIGATE

Affected: all versions

Fixed in: no fixed release known

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy blackice-agent-server || rpm -q blackice-agent-server || blackice-agent-server --version

No fixed or unaffected release known

Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access.

iss blackice pc protection DOWNGRADE

Affected: 3.6 · 3.6cpu

Fixed in: no fixed release known

Safe to downgrade to: a release before 3.6

1. Check installed version

apt-cache policy blackice-pc-protection || rpm -q blackice-pc-protection || blackice-pc-protection --version

2. No fixed release: DOWNGRADE to a release before 3.6 (Debian / Ubuntu)

apt-cache madison blackice-pc-protection sudo apt install blackice-pc-protection=<VERSION_BEFORE_3.6> sudo apt-mark hold blackice-pc-protection

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list blackice-pc-protection sudo dnf downgrade blackice-pc-protection-<VERSION_BEFORE_3.6> sudo dnf versionlock add blackice-pc-protection

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

iss blackice server protection MITIGATE

Affected: all versions

Fixed in: no fixed release known

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy blackice-server-protection || rpm -q blackice-server-protection || blackice-server-protection --version

No fixed or unaffected release known

Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access.

iss realsecure desktop DOWNGRADE

Affected: 3.6 · 7.0

Fixed in: no fixed release known

Safe to downgrade to: a release before 3.6

1. Check installed version

apt-cache policy realsecure-desktop || rpm -q realsecure-desktop || realsecure-desktop --version

2. No fixed release: DOWNGRADE to a release before 3.6 (Debian / Ubuntu)

apt-cache madison realsecure-desktop sudo apt install realsecure-desktop=<VERSION_BEFORE_3.6> sudo apt-mark hold realsecure-desktop

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list realsecure-desktop sudo dnf downgrade realsecure-desktop-<VERSION_BEFORE_3.6> sudo dnf versionlock add realsecure-desktop

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2005-2711?

blackice agent server: mitigate or apply the listed mitigation; blackice pc protection: downgrade or apply the listed mitigation; blackice server protection: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2005-2711 being exploited?

CVE-2005-2711 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2005-2711 affect?

CVE-2005-2711 affects blackice agent server, blackice pc protection, blackice server protection. Severity is high (CVSS 7.2). ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, and RealSecure Desktop 3.6 and 7.0, does not drop privileges before launching help from the "More Info" button in the "App

How urgent is CVE-2005-2711?

Priority 33/100. High severity

Related CVEs

CVE-2004-2125 MEDIUM 4.6 DOWNGRADE DOWNGRADE Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with applicati
CVE-2004-0362 HIGH 7.5 DOWNGRADE DOWNGRADE Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) co
CVE-2004-0193 HIGH 7.5 DOWNGRADE DOWNGRADE Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecur

References

← Back to latest CVEs