5 matches found
CVE-2007-3086: Undefined Security Weakness
Unrestricted critical resource lock in Agnitum Outpost Firewall PRO 4.0 1007.591.145 and earlier allows local users to cause a denial of service system hang by capturing the outpostipchdr mutex...
CVE-2007-0333: Undefined Security Weakness
Agnitum Outpost Firewall PRO 4.0 allows local users to bypass access restrictions and insert Trojan horse drivers into the product's installation directory by creating links using FileLinkInformation requests with the ZwSetInformationFile function, as demonstrated by modifying SandBox.sys...
Outpost Firewall PRO本地特权提升漏洞
Outpost Firewall PRO是一款防火墙应用程序。 Outpost Firewall PRO执行SSDT HOOKING操作存在问题,本地攻击者可以利用漏洞提升特权。 Outpost Firewall PRO保护自身文件并禁止其他应用程序操作。在安装目录中的文件和目录通过各种SSDT HOOK来保护,但是这种保护实现没有防止恶意程序调用API ZwSetInformationFile class...
CVE-2006-3697
Agnitum Outpost Firewall Pro 3.51.759.6511 462, as used in 1 Lavasoft Personal Firewall 1.0.543.5722 433 and 2 Novell BorderManager Novell Client Firewall 2.0, does not properly restrict user activities in application windows that run in a LocalSystem context, which allows local users to gain...
CVE-2006-3697: Undefined Security Weakness
Agnitum Outpost Firewall Pro 3.51.759.6511 462, as used in 1 Lavasoft Personal Firewall 1.0.543.5722 433 and 2 Novell BorderManager Novell Client Firewall 2.0, does not properly restrict user activities in application windows that run in a LocalSystem context, which allows local users to gain...