CVE-2004-2472

Agnitum Outpost Pro Firewall 2.1 is affected by CVE-2004-2472. Remote attackers can cause a denial of service by flooding the firewall with small, invalid packets, which Outpost Pro cannot process quickly enough, leading to partial availability impact. The description does not provide root-cause ...

CVE-2006-3697

CVE-2006-3697 concerns Agnitum Outpost Firewall Pro 3.51.759.6511 (and variants such as Lavasoft Personal Firewall 1.x and Novell BorderManager client firewall 2.0) where windows running under LocalSystem context do not properly restrict user actions. The vulnerability potentially allows local pr...

CVE-2007-0333

CVE-2007-0333 affects Agnitum Outpost Firewall PRO 4.0. The issue is a local bypass of access restrictions that enables a user to insert Trojan horse drivers into the installation directory by crafting FileLinkInformation requests that use ZwSetInformationFile, demonstrated via modification of Sa...

CVE-2006-5721

The CVE-2006-5721 entry concerns Outpost Firewall PRO 4.0, where the \Device\SandBox driver is affected. A local user can trigger a denial-of-service (system crash) by passing an invalid argument to DeviceIoControl, causing an invalid memory operation. The available documents do not specify a pat...

CVE-2007-3086

CVE-2007-3086 affects Agnitum Outpost Firewall PRO 4.0 (build 1007.591.145 and earlier). The issue is an unrestricted critical resource lock exposed via the outpost_ipc_hdr mutex, allowing local users to cause a denial of service (system hang). The connected sources confirm the vulnerable compone...

CVE-2006-7160

Summary: CVE-2006-7160 affects the Sandbox.sys driver in Outpost Firewall PRO 4.0 (and possibly earlier versions). It does not validate arguments to hooked SSDT functions, allowing a local attacker to cause a denial of service (crash) by passing invalid arguments to a set of SSDT handlers, includ...

CVE-2006-3696

The CVE concerns filtnt.sys in Outpost Firewall Pro—prior to version 3.51.759.6511 (462)—where local users can trigger a denial of service (crash) by passing long arguments to mshta.exe. Impact is a local DoS with partial availability impact; exploitation is described as local with no authenticat...

CVE-2007-5042

Outpost Firewall Pro 4.0.1025.7828 is affected by CVE-2007-5042, where the driver does not properly validate parameters to SSDT function handlers, enabling a local user to crash the system and potentially gain privileges via kernel SSDT hooks (NtCreateKey, NtDeleteFile, NtLoadDriver, NtOpenProces...