CVE-2007-5042

Outpost Firewall Pro 4.0.1025.7828 is affected by CVE-2007-5042, where the driver does not properly validate parameters to SSDT function handlers, enabling a local user to crash the system and potentially gain privileges via kernel SSDT hooks (NtCreateKey, NtDeleteFile, NtLoadDriver, NtOpenProces...

Design/Logic Flaw

Unrestricted critical resource lock in Agnitum Outpost Firewall PRO 4.0 1007.591.145 and earlier allows local users to cause a denial of service system hang by capturing the outpostipchdr mutex...

CVE-2007-3086

Unrestricted critical resource lock in Agnitum Outpost Firewall PRO 4.0 1007.591.145 and earlier allows local users to cause a denial of service system hang by capturing the outpostipchdr mutex...

CVE-2007-3086

CVE-2007-3086 affects Agnitum Outpost Firewall PRO 4.0 (build 1007.591.145 and earlier). The issue is an unrestricted critical resource lock exposed via the outpost_ipc_hdr mutex, allowing local users to cause a denial of service (system hang). The connected sources confirm the vulnerable compone...

CVE-2007-3086

Unrestricted critical resource lock in Agnitum Outpost Firewall PRO 4.0 1007.591.145 and earlier allows local users to cause a denial of service system hang by capturing the outpostipchdr mutex...

Agnitum Outpost Firewall 4.0 - Outpost_IPC_HDR Local Denial of Service

Agnitum Outpost Firewall 4.0 - OutpostIPCHDR Local Denial of Service // source: https://www.securityfocus.com/bid/24284/info Outpost Firewall is prone to a local denial-of-service vulnerability. An attacker can exploit this issue to block arbitrary processes, denying service to legitimate users...

Agnitum Outpost Firewall 4.0 - Outpost_IPC_HDR Local Denial of Service

// source: https://www.securityfocus.com/bid/24284/info Outpost Firewall is prone to a local denial-of-service vulnerability. An attacker can exploit this issue to block arbitrary processes, denying service to legitimate users. This issue affects Outpost Firewall 4.0 build 1007.591.145 and build...

Outpost Enforcing system reboot with 'outpost_ipc_hdr' mutex Vulnerability

Hello, We would like to inform you about a vulnerability in Outpost Firewall PRO 4.0. Description: Outpost insufficiently protects its own mutex outpostipchdr. Arbitrary process is able to open and capture this mutex. In such case, Outpost is not able to use this mutex for its synchronization and...

Outpost firewall DoS

Local user can cause partial denial of system services by manipulating outpostipchdr mutex...

CVE-2006-7160

The Sandbox.sys driver in Outpost Firewall PRO 4.0, and possibly earlier versions, does not validate arguments to hooked SSDT functions, which allows local users to cause a denial of service crash via invalid arguments to the 1 NtAssignProcessToJobObject,, 2 NtCreateKey, 3 NtCreateThread, 4...

CVE-2006-7160

Summary: CVE-2006-7160 affects the Sandbox.sys driver in Outpost Firewall PRO 4.0 (and possibly earlier versions). It does not validate arguments to hooked SSDT functions, allowing a local attacker to cause a denial of service (crash) by passing invalid arguments to a set of SSDT handlers, includ...

CVE-2006-7160

The Sandbox.sys driver in Outpost Firewall PRO 4.0, and possibly earlier versions, does not validate arguments to hooked SSDT functions, which allows local users to cause a denial of service crash via invalid arguments to the 1 NtAssignProcessToJobObject,, 2 NtCreateKey, 3 NtCreateThread, 4...

CVE-2007-0333

Agnitum Outpost Firewall PRO 4.0 allows local users to bypass access restrictions and insert Trojan horse drivers into the product's installation directory by creating links using FileLinkInformation requests with the ZwSetInformationFile function, as demonstrated by modifying SandBox.sys...

Design/Logic Flaw

Agnitum Outpost Firewall PRO 4.0 allows local users to bypass access restrictions and insert Trojan horse drivers into the product's installation directory by creating links using FileLinkInformation requests with the ZwSetInformationFile function, as demonstrated by modifying SandBox.sys...

CVE-2007-0333

CVE-2007-0333 affects Agnitum Outpost Firewall PRO 4.0. The issue is a local bypass of access restrictions that enables a user to insert Trojan horse drivers into the installation directory by crafting FileLinkInformation requests that use ZwSetInformationFile, demonstrated via modification of Sa...

Outpost Firewall PRO本地特权提升漏洞

Outpost Firewall PRO是一款防火墙应用程序。 Outpost Firewall PRO执行SSDT HOOKING操作存在问题，本地攻击者可以利用漏洞提升特权。 Outpost Firewall PRO保护自身文件并禁止其他应用程序操作。在安装目录中的文件和目录通过各种SSDT HOOK来保护，但是这种保护实现没有防止恶意程序调用API ZwSetInformationFile class...

Outpost防火墙文件链接绕过安全保护机制漏洞

Outpost Firewal Pro是一款小巧的网络防火墙软件，包括了广告和图片过滤、内容过滤、DNS缓存等功能。 Outpost使用各种SSDT钩子保护其安装目录中的文件和目录，但在实现这种保护时无法防范恶意的应用程序调用原始API ZwSetInformationFile类FileLinkInformation，这允许攻击者在调用该函数时替换系统没有使用的文件。 Outpost安装目录中的一个有漏洞文件为SandBox.sys。攻击者可以使用伪造的拷贝替换这个驱动，而在下一次重启的时候系统就会加载这个驱动。由于驱动是以特权的内核模式运行的，因此这可能导致完全的系统控制。 Agnit...

Outpost Bypassing Self-Protection using file links Vulnerability

Hello, We would like to inform you about a vulnerability in Outpost Firewall PRO 4.0. Description: Outpost protects its files and forbids other applications to manipulate them. Files and directories in its installation directory are guarded by various SSDT hooks. However, the implementation of th...

Ooutpost self-protection bypass

It's possible to bypass self-protection by using NTFS hard links...

Outpost Firewall PRO 4.0 - Local Privilege Escalation

Outpost Firewall PRO 4.0 - Local Privilege Escalation source: https://www.securityfocus.com/bid/22069/info Outpost Firewall PRO is prone to a local privilege-escalation vulnerability because it fails to perform adequate SSDT System Service Descriptor Table hooking on files in its installation...