CVE-2007-0081

Sunbelt Kerio Personal Firewall (SKPF) 4.3.268 and 4.3.246 (and possibly other versions) is affected by CVE-2007-0081, where local users can place a Trojan horse iphlpapi.dll in the installation directory to compromise the product. The NVD CVSS2 base score is 6.8 (MEDIUM) with high impact on conf...

CVE-2007-0081

Sunbelt Kerio Personal Firewall SKPF 4.3.268 and 4.3.246, and possibly other versions allows local users to provide a Trojan horse iphlpapi.dll to SKPF by placing it in the installation directory...

Kerio Personal Firewall IPHLPAPI.DLL本地权限提升漏洞

Kerio Personal Firewall是一款流行的个人防火墙应用程序。 Kerio Personal Firewall装载文件存在问题，本地攻击者可以利用漏洞提升特权。 系统库iphlpapi.dll安装在系统目录中，需要此DLL的SKPF服务先尝试在安装目录中查找iphlpapi.dll，如果在此目录没有找到，会尝试在系统目录中找，如果攻击者在SKPF中的安装目录中建立恶意的iphlpapi.dll文件，在SKPF服务初始化时被操作系统装载到SKPF服务中，导致恶意代码在SKPF服务中执行。 Sunbelt Software Kerio Personal Firewall...

Kerio可注入伪造iphlpapi DLL漏洞

Kerio Personal Firewall是一款个人桌面系统防火墙。 Kerio Personal Firewall处理程序相关组件的加载时存在漏洞，本地攻击者可能利用此漏洞提升权限或使防火墙失效。 Kerio Personal Firewall在加载相关的库文件iphlpapi.dll时，首先从软件的安装目录搜索，如果搜索不到才从操作系统目录加载，而且软件的安装目录是可写的，本地攻击者可以创建伪造的DLL文件，防火墙服务在初始化时加载执行其中的代码，导致执行攻击者的任意指令。 Kerio Personal Firewall 4.3.268 Kerio Personal Firewa...

Kerio Personal Firewall 4.3 - 'IPHLPAPI.dll' Local Privilege Escalation

source: https://www.securityfocus.com/bid/21828/info Kerio Personal Firewall is prone to a local privilege-escalation vulnerability. A local attacker could exploit this issue to execute arbitrary machine code with SYSTEM-level privileges. A successful exploit could result in the complete compromi...

Kerio Personal Firewall 4.3 - IPHLPAPI.dll Local Privilege Escalation

Kerio Personal Firewall 4.3 - IPHLPAPI.dll Local Privilege Escalation source: https://www.securityfocus.com/bid/21828/info Kerio Personal Firewall is prone to a local privilege-escalation vulnerability. A local attacker could exploit this issue to execute arbitrary machine code with SYSTEM-level...

CVE-2006-6621

Filseclab Personal Firewall 3.0.0.8686 relies on the Process Environment Block PEB to identify a process, which allows local users to bypass the product's controls on a process by spoofing the 1 ImagePathName, 2 CommandLine, and 3 WindowTitle fields in the PEB...

CVE-2006-6623

Sygate Personal Firewall 5.6.2808 relies on the Process Environment Block PEB to identify a process, which allows local users to bypass the product's controls on a process by spoofing the 1 ImagePathName, 2 CommandLine, and 3 WindowTitle fields in the PEB...

CVE-2006-6620

CVE-2006-6620 affects Comodo Personal Firewall 2.3.6.81, which relies on the Process Environment Block (PEB) to identify a process. This allows local users to bypass the product’s controls on a process by spoofing the PEB fields (ImagePathName, CommandLine, WindowTitle). The provided documents do...

CVE-2006-6623

Sygate Personal Firewall 5.6.2808 is affected. The flaw arises from relying on the Process Environment Block (PEB) to identify a process, allowing local attackers to bypass product controls by spoofing the PEB fields (ImagePathName, CommandLine, and WindowTitle). The connected documents confirm t...

CVE-2006-6621

The CVE-2006-6621 entry concerns Filseclab Personal Firewall 3.0.0.8686, which relies on the Process Environment Block (PEB) to identify a process. The root cause is spoofing of PEB fields (ImagePathName, CommandLine, WindowTitle), enabling local users to bypass the product’s controls on a proces...

CVE-2006-6623

Sygate Personal Firewall 5.6.2808 relies on the Process Environment Block PEB to identify a process, which allows local users to bypass the product's controls on a process by spoofing the 1 ImagePathName, 2 CommandLine, and 3 WindowTitle fields in the PEB...

CVE-2006-6621

Filseclab Personal Firewall 3.0.0.8686 relies on the Process Environment Block PEB to identify a process, which allows local users to bypass the product's controls on a process by spoofing the 1 ImagePathName, 2 CommandLine, and 3 WindowTitle fields in the PEB...

Symantec Norton个人防火墙SuiteOwners注册表键值安全绕过漏洞

Symantec Norton Personal Firewall是一款流行的个人桌面防火墙。 Symantec Norton Personal Firewall不正确的注册表键值保护，远程攻击者可以利用漏洞绕过安全保护，装载任意文件等，导致特权提升。...

Computer Associates CA Internet Security / CA Personal Firewall privilege escalation

Insufficient TDI and NDIS hooked function paramters validation...

[Reversemode advisory] Computer Associates HIPS Drivers - multiple local privilege escalation vulnerabilities.

Computer Associates "Host Intrusion Prevention System" Engine Drivers are prone to multiple local privilege escalation vulnerabilities. Unprivileged users can take advantage of these flaws in order to execute arbitrary code with kernel privileges. Two drivers are affected, kmxstart.sys and...

Computer Associates Personal Firewall 9.0 - HIPS Driver 'kmxstart.sys' Local Privilege Escalation

// source: https://www.securityfocus.com/bid/21140/info Multiple Computer Associates security-related products are prone to multiple local privilege-escalation vulnerabilities. An attacker can leverage these issues to execute arbitrary code with SYSTEM-level privileges. This could result in the...

Computer Associates Personal Firewall 9.0 - HIPS Driver kmxstart.sys Local Privilege Escalation

Computer Associates Personal Firewall 9.0 - HIPS Driver kmxstart.sys Local Privilege Escalation // source: https://www.securityfocus.com/bid/21140/info Multiple Computer Associates security-related products are prone to multiple local privilege-escalation vulnerabilities. An attacker can leverage...

Computer Associates Personal Firewall 9.0 - HIPS Driver 'kmxfw.sys' Local Privilege Escalation

// source: https://www.securityfocus.com/bid/21140/info Multiple Computer Associates security-related products are prone to multiple local privilege-escalation vulnerabilities. An attacker can leverage these issues to execute arbitrary code with SYSTEM-level privileges. This could result in the...

Microsoft Windows Workstation服务NetpManageIPCConnect远程栈溢出漏洞（MS06-070)

Microsoft Windows是微软发布的非常流行的操作系统。 Windows的Workstation服务组件中存在栈溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 在Workstation服务名为wkssvc.dll的模块中，NetpManageIPCConnect函数以未经检查的缓冲区数据调用了swprintf，而输入缓冲区是远程攻击者可控的。 .text:76781D67 mov edi, ebp+arg0 ... .text:76781D90 lea eax, ebp+var2CC ... .text:76781DA0 push edi .text:76781DA...