Lucene search

[email protected]CVE-2009-2450

HistoryJul 13, 2009 - 5:30 p.m.

CVE-2009-2450

2009-07-1317:30:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2009-2450

oamon.sys

kernel driver

online armor

personal firewall

privilege escalation

ioctl

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

The OAmon.sys kernel driver 3.1.0.0 and earlier in Tall Emu Online Armor Personal Firewall AV+ before 3.5.0.12, and Personal Firewall 3.5 before 3.5.0.14, allows local users to gain privileges via crafted METHOD_NEITHER IOCTL requests to \Device\OAmon containing arbitrary kernel addresses, as demonstrated using the 0x830020C3 IOCTL.

Affected configurations

NVD

Node

tallemuonline_armor_personal_firewall_av\+Range≤3.5.0.11

tallemuonline_armor_personal_firewall_av\+Match3.5.0.6

tallemuonline_armor_personal_firewall_av\+Match3.5.0.9

tallemupersonal_firewallRange≤3.5.0.13

tallemupersonal_firewallMatch3.5.0.1

tallemupersonal_firewallMatch3.5.0.2

tallemupersonal_firewallMatch3.5.0.3

tallemupersonal_firewallMatch3.5.0.4

tallemupersonal_firewallMatch3.5.0.5

tallemupersonal_firewallMatch3.5.0.6

tallemupersonal_firewallMatch3.5.0.7

tallemupersonal_firewallMatch3.5.0.8

tallemupersonal_firewallMatch3.5.0.9

tallemupersonal_firewallMatch3.5.0.10

tallemupersonal_firewallMatch3.5.0.11

tallemupersonal_firewallMatch3.5.0.12

CPENameOperatorVersion
tallemu:online_armor_personal_firewall_av\+tallemu online armor personal firewall av+le3.5.0.11
tallemu:online_armor_personal_firewall_av\+tallemu online armor personal firewall av+eq3.5.0.6
tallemu:online_armor_personal_firewall_av\+tallemu online armor personal firewall av+eq3.5.0.9
tallemu:personal_firewalltallemu personal firewallle3.5.0.13
tallemu:personal_firewalltallemu personal firewalleq3.5.0.1
tallemu:personal_firewalltallemu personal firewalleq3.5.0.2
tallemu:personal_firewalltallemu personal firewalleq3.5.0.3
tallemu:personal_firewalltallemu personal firewalleq3.5.0.4
tallemu:personal_firewalltallemu personal firewalleq3.5.0.5
tallemu:personal_firewalltallemu personal firewalleq3.5.0.6

CPE	Name	Operator	Version
tallemu:online_armor_personal_firewall_av\+	tallemu online armor personal firewall av+	le	3.5.0.11
tallemu:online_armor_personal_firewall_av\+	tallemu online armor personal firewall av+	eq	3.5.0.6
tallemu:online_armor_personal_firewall_av\+	tallemu online armor personal firewall av+	eq	3.5.0.9
tallemu:personal_firewall	tallemu personal firewall	le	3.5.0.13
tallemu:personal_firewall	tallemu personal firewall	eq	3.5.0.1
tallemu:personal_firewall	tallemu personal firewall	eq	3.5.0.2
tallemu:personal_firewall	tallemu personal firewall	eq	3.5.0.3
tallemu:personal_firewall	tallemu personal firewall	eq	3.5.0.4
tallemu:personal_firewall	tallemu personal firewall	eq	3.5.0.5
tallemu:personal_firewall	tallemu personal firewall	eq	3.5.0.6

Rows per page:

1-10 of 161

References

milw0rm.com/sploits/2009-OAmon_Exp.zip

www.exploit-db.com/exploits/8875

www.ntinternals.org/ntiadv0806/ntiadv0806.html

www.securityfocus.com/bid/35227

exchange.xforce.ibmcloud.com/vulnerabilities/50960

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2009-2450

nvd1 prion1 cvelist1