Outpost Firewall PRO 4.0 - Local Privilege Escalation

source: https://www.securityfocus.com/bid/22069/info Outpost Firewall PRO is prone to a local privilege-escalation vulnerability because it fails to perform adequate SSDT System Service Descriptor Table hooking on files in its installation directory. A local attacker can exploit this issue to...

Outpost Firewall PRO安全绕过漏洞

Outpost Firewall PRO是一款桌面防火墙程序。 Outpost Firewall PRO处理DLL注入存在问题，远程攻击者可以利用漏洞绕过安全防护放置木马程序。 Outpost Firewall PRO虽然对普通的DLL注入进行防护，防止其他进程操作它自身服务进程，但是没有保护针对不依靠写入目标进程内存的技术，因此可导致使用恶意DLL感染services.exe并执行任意代码。 Agnitum Outpost Firewall PRO 4.0 目前没有解决方案提供： http://www.agnitum.com/products/outpost/...

Outpost Multiple insufficient argument validation of hooked SSDT function Vulnerability

Hello, We would like to inform you about a vulnerability in Outpost Firewall PRO 4.0. Description: Outpost Firewall PRO hooks many functions in SSDT and in at least twelve cases it fails to validate arguments that come from user mode. User calls to NtAssignProcessToJobObject, NtCreateKey,...

Outpost Firewall privilege escalation

Insufficient incoming data validation for DeviceSandBox device driver and SSDT hoocked functions...

CVE-2006-5721

The \Device\SandBox driver in Outpost Firewall PRO 4.0 964.582.059 allows local users to cause a denial of service system crash via an invalid argument to the DeviceIoControl function that triggers an invalid memory operation...

CVE-2006-5721

The CVE-2006-5721 entry concerns Outpost Firewall PRO 4.0, where the \Device\SandBox driver is affected. A local user can trigger a denial-of-service (system crash) by passing an invalid argument to DeviceIoControl, causing an invalid memory operation. The available documents do not specify a pat...

CVE-2006-5721

The \Device\SandBox driver in Outpost Firewall PRO 4.0 964.582.059 allows local users to cause a denial of service system crash via an invalid argument to the DeviceIoControl function that triggers an invalid memory operation...

Outpost Insufficient validation of 'SandBox' driver input buffer

Hello, We would like to inform you about a vulnerability in Outpost Firewall PRO 4.0. Description: Outpost insufficiently protects its driver DeviceSandBox against a manipulation by malicious applications and it fails to validate its input buffer. It is possible to open this driver and send...

Outpost Firewall PRO 4.0 - Local Denial of Service

source: https://www.securityfocus.com/bid/20860/info Outpost Firewall PRO is prone to a local denial-of-service vulnerability because the application fails to properly handle unexpected input. Exploiting this issue allows local attackers to crash affected computers, denying service to legitimate...

Outpost Firewall PRO 4.0 - Local Denial of Service

Outpost Firewall PRO 4.0 - Local Denial of Service source: https://www.securityfocus.com/bid/20860/info Outpost Firewall PRO is prone to a local denial-of-service vulnerability because the application fails to properly handle unexpected input. Exploiting this issue allows local attackers to crash...

outpostPwn.txt

Hi, all current available "Outpost Firewall" versions do have severe vulnerabilities, every local user is able to run programs under the very high privileged LocalSystem account. Steps to reproduce: 1. create an empty text file e.g. "empty.txt" 2. create a batch file which will open a command...

Escalation of privileges in Outpost and Lavasoft Firewalls -Unusual ShellExecute behavior

Vulnerable Products: Outpost Firewall Pro ver. 3.51.759.6511 462 And Lavasoft Personal Firewall ver. 1.0.543.5722 433 Summary of problem: The firewall runs its windows under a SYSTEM context. A user with lower privileges than SYSTEM could locate the open folder control on some of these windows,...

CVE-2006-3696

filtnt.sys in Outpost Firewall Pro before 3.51.759.6511 462 allows local users to cause a denial of service crash via long arguments to mshta.exe...

CVE-2006-3697

Agnitum Outpost Firewall Pro 3.51.759.6511 462, as used in 1 Lavasoft Personal Firewall 1.0.543.5722 433 and 2 Novell BorderManager Novell Client Firewall 2.0, does not properly restrict user activities in application windows that run in a LocalSystem context, which allows local users to gain...

CVE-2006-3696

filtnt.sys in Outpost Firewall Pro before 3.51.759.6511 462 allows local users to cause a denial of service crash via long arguments to mshta.exe...

CVE-2006-3696

The CVE concerns filtnt.sys in Outpost Firewall Pro—prior to version 3.51.759.6511 (462)—where local users can trigger a denial of service (crash) by passing long arguments to mshta.exe. Impact is a local DoS with partial availability impact; exploitation is described as local with no authenticat...

CVE-2006-3697

CVE-2006-3697 concerns Agnitum Outpost Firewall Pro 3.51.759.6511 (and variants such as Lavasoft Personal Firewall 1.x and Novell BorderManager client firewall 2.0) where windows running under LocalSystem context do not properly restrict user actions. The vulnerability potentially allows local pr...

Agnitum Outpost Firewall 3.5.631 - 'FiltNT.SYS' Local Denial of Service

source: https://www.securityfocus.com/bid/19026/info Outpost Firewall is prone to a local denial-of-service vulnerability. An attacker can exploit this issue to crash the application, effectively denying service. Outpost Firewall Pro version 3.5.631 is affected by this issue; other versions may...

Agnitum Outpost Firewall 3.5.631 - FiltNT.SYS Local Denial of Service

Agnitum Outpost Firewall 3.5.631 - FiltNT.SYS Local Denial of Service source: https://www.securityfocus.com/bid/19026/info Outpost Firewall is prone to a local denial-of-service vulnerability. An attacker can exploit this issue to crash the application, effectively denying service. Outpost Firewa...

CVE-2004-2554

The CVE-2004-2554 issue affects Novell Client Firewall (NCF) 2.0, which is based on Agnitum Outpost Firewall. The vulnerability allows local attackers to execute arbitrary code with SYSTEM privileges by opening the NCF tray icon and using the Help functionality to launch programs with SYSTEM priv...