high7.2Public exploit code
CVE-2007-0333
Agnitum Outpost Firewall PRO 4.0 allows local users to bypass access restrictions and insert Trojan horse drivers into the product's installation directory by …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Outpost Firewall PRO 4.0 - Local Privilege Escalation2007-01-15 · local · windows · Verified
Impact
Agnitum Outpost Firewall PRO 4.0 allows local users to bypass access restrictions and insert Trojan horse drivers into the product's installation directory by creating links using FileLinkInformation requests with the ZwSetInformationFile function, as demonstrated by modifying SandBox.sys.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Agnitum | Outpost Firewall | Version 4.0 |
References
- NVD record
- CVE.org record
- http://osvdb.org/33480
- http://securityreason.com/securityalert/2163
- http://www.matousec.com/info/advisories/Outpost-Bypassing-Self-Protection-using-file-links.php
- http://www.securityfocus.com/archive/1/456973/100/0/threaded
- http://www.securityfocus.com/bid/22069
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31529
- http://osvdb.org/33480
- http://securityreason.com/securityalert/2163
- http://www.matousec.com/info/advisories/Outpost-Bypassing-Self-Protection-using-file-links.php
- http://www.securityfocus.com/archive/1/456973/100/0/threaded
- http://www.securityfocus.com/bid/22069
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31529