Outpost Firewall PRO安全绕过漏洞

Outpost Firewall PRO是一款桌面防火墙程序。 Outpost Firewall PRO处理DLL注入存在问题，远程攻击者可以利用漏洞绕过安全防护放置木马程序。 Outpost Firewall PRO虽然对普通的DLL注入进行防护，防止其他进程操作它自身服务进程，但是没有保护针对不依靠写入目标进程内存的技术，因此可导致使用恶意DLL感染services.exe并执行任意代码。 Agnitum Outpost Firewall PRO 4.0 目前没有解决方案提供： http://www.agnitum.com/products/outpost/...

Outpost Multiple insufficient argument validation of hooked SSDT function Vulnerability

Hello, We would like to inform you about a vulnerability in Outpost Firewall PRO 4.0. Description: Outpost Firewall PRO hooks many functions in SSDT and in at least twelve cases it fails to validate arguments that come from user mode. User calls to NtAssignProcessToJobObject, NtCreateKey,...

CVE-2006-5721

The CVE-2006-5721 entry concerns Outpost Firewall PRO 4.0, where the \Device\SandBox driver is affected. A local user can trigger a denial-of-service (system crash) by passing an invalid argument to DeviceIoControl, causing an invalid memory operation. The available documents do not specify a pat...

Outpost Insufficient validation of 'SandBox' driver input buffer

Hello, We would like to inform you about a vulnerability in Outpost Firewall PRO 4.0. Description: Outpost insufficiently protects its driver DeviceSandBox against a manipulation by malicious applications and it fails to validate its input buffer. It is possible to open this driver and send...

Outpost Firewall PRO 4.0 - Local Denial of Service

source: https://www.securityfocus.com/bid/20860/info Outpost Firewall PRO is prone to a local denial-of-service vulnerability because the application fails to properly handle unexpected input. Exploiting this issue allows local attackers to crash affected computers, denying service to legitimate...

Outpost Firewall PRO 4.0 - Local Denial of Service

Outpost Firewall PRO 4.0 - Local Denial of Service source: https://www.securityfocus.com/bid/20860/info Outpost Firewall PRO is prone to a local denial-of-service vulnerability because the application fails to properly handle unexpected input. Exploiting this issue allows local attackers to crash...

CVE-2006-3696

filtnt.sys in Outpost Firewall Pro before 3.51.759.6511 462 allows local users to cause a denial of service crash via long arguments to mshta.exe...

CVE-2006-3697

Agnitum Outpost Firewall Pro 3.51.759.6511 462, as used in 1 Lavasoft Personal Firewall 1.0.543.5722 433 and 2 Novell BorderManager Novell Client Firewall 2.0, does not properly restrict user activities in application windows that run in a LocalSystem context, which allows local users to gain...

CVE-2006-3696

The CVE concerns filtnt.sys in Outpost Firewall Pro—prior to version 3.51.759.6511 (462)—where local users can trigger a denial of service (crash) by passing long arguments to mshta.exe. Impact is a local DoS with partial availability impact; exploitation is described as local with no authenticat...

CVE-2006-3696

filtnt.sys in Outpost Firewall Pro before 3.51.759.6511 462 allows local users to cause a denial of service crash via long arguments to mshta.exe...

Agnitum Outpost Firewall 3.5.631 - 'FiltNT.SYS' Local Denial of Service

source: https://www.securityfocus.com/bid/19026/info Outpost Firewall is prone to a local denial-of-service vulnerability. An attacker can exploit this issue to crash the application, effectively denying service. Outpost Firewall Pro version 3.5.631 is affected by this issue; other versions may...

Outpost Firewall Pro ver. 1.0.1817.1645 local bug

При отправлении в сеть запроса приложением не вписанным в правила firewall'a невписанное приложение появляется табличка "Разрешить этому приложению...?" и если не закрывая это окно закрыть firewall "Выход с остановкой сервиса" то он тихо умирает вместе с сервисом даже из под обычного юзера... Yod...