CVE-2006-3973

My Firewall Plus 5.0 Build 1119 does not verify if explorer.exe is running before launching iexplore.exe from the "Test Your Firewall" feature, which allows local users to gain SYSTEM privileges.

CVSS v2.0 7.2 HIGH

7.2^/10

CVSS v2.0 : HIGH

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://secunia.com/secunia_research/2006-59/advisory	Vendor Advisory
http://secunia.com/advisories/21142	Vendor Advisory
http://www.securityfocus.com/bid/21228
http://securitytracker.com/id?1017267
http://www.vupen.com/english/advisories/2006/4635
https://exchange.xforce.ibmcloud.com/vulnerabilities/30476
http://www.securityfocus.com/archive/1/452233/100/0/threaded

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:h:my_firewall_plus:my_firewall_plus:5.0_build_1119:*:*:*:*:*:*:*

Information

Published : 2006-11-22 03:07

Updated : 2018-10-17 14:32

NVD link : CVE-2006-3973

Mitre link : CVE-2006-3973

JSON object : View

CWE

NVD-CWE-Other

Advertisement

Products Affected

my_firewall_plus

my_firewall_plus

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://secunia.com/secunia_research/2006-59/advisory", "name": "http://secunia.com/secunia_research/2006-59/advisory", "tags": ["Vendor Advisory"], "refsource": "MISC"}, {"url": "http://secunia.com/advisories/21142", "name": "21142", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.securityfocus.com/bid/21228", "name": "21228", "tags": [], "refsource": "BID"}, {"url": "http://securitytracker.com/id?1017267", "name": "1017267", "tags": [], "refsource": "SECTRACK"}, {"url": "http://www.vupen.com/english/advisories/2006/4635", "name": "ADV-2006-4635", "tags": [], "refsource": "VUPEN"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30476", "name": "my-firewall-privilege-escalation(30476)", "tags": [], "refsource": "XF"}, {"url": "http://www.securityfocus.com/archive/1/452233/100/0/threaded", "name": "20061121 Secunia Research: My Firewall Plus Privilege EscalationVulnerability", "tags": [], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "My Firewall Plus 5.0 Build 1119 does not verify if explorer.exe is running before launching iexplore.exe from the \"Test Your Firewall\" feature, which allows local users to gain SYSTEM privileges."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2006-3973", "ASSIGNER": "PSIRT-CNA@flexerasoftware.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "impactScore": 10.0, "obtainAllPrivilege": true, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2006-11-22T11:07Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:my_firewall_plus:my_firewall_plus:5.0_build_1119:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-17T21:32Z"}