CVE-2007-0333

Agnitum Outpost Firewall PRO 4.0 allows local users to bypass access restrictions and insert Trojan horse drivers into the product's installation directory by creating links using FileLinkInformation requests with the ZwSetInformationFile function, as demonstrated by modifying SandBox.sys.

CVSS v2.0 7.2 HIGH

7.2^/10

CVSS v2.0 : HIGH

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.matousec.com/info/advisories/Outpost-Bypassing-Self-Protection-using-file-links.php	Vendor Advisory
http://www.securityfocus.com/bid/22069	Exploit
http://securityreason.com/securityalert/2163
http://osvdb.org/33480
https://exchange.xforce.ibmcloud.com/vulnerabilities/31529
http://www.securityfocus.com/archive/1/456973/100/0/threaded

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:a:agnitum:outpost_firewall:4.0:*:pro:*:*:*:*:*

Information

Published : 2007-01-17 18:28

Updated : 2018-10-16 09:32

NVD link : CVE-2007-0333

Mitre link : CVE-2007-0333

JSON object : View

CWE

NVD-CWE-Other

Advertisement

Products Affected

agnitum

outpost_firewall

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.matousec.com/info/advisories/Outpost-Bypassing-Self-Protection-using-file-links.php", "name": "http://www.matousec.com/info/advisories/Outpost-Bypassing-Self-Protection-using-file-links.php", "tags": ["Vendor Advisory"], "refsource": "MISC"}, {"url": "http://www.securityfocus.com/bid/22069", "name": "22069", "tags": ["Exploit"], "refsource": "BID"}, {"url": "http://securityreason.com/securityalert/2163", "name": "2163", "tags": [], "refsource": "SREASON"}, {"url": "http://osvdb.org/33480", "name": "33480", "tags": [], "refsource": "OSVDB"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31529", "name": "outpostfirewall-zwset-privilege-escalation(31529)", "tags": [], "refsource": "XF"}, {"url": "http://www.securityfocus.com/archive/1/456973/100/0/threaded", "name": "20070115 Outpost Bypassing Self-Protection using file links Vulnerability", "tags": [], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Agnitum Outpost Firewall PRO 4.0 allows local users to bypass access restrictions and insert Trojan horse drivers into the product's installation directory by creating links using FileLinkInformation requests with the ZwSetInformationFile function, as demonstrated by modifying SandBox.sys."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2007-0333", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "impactScore": 10.0, "obtainAllPrivilege": true, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2007-01-18T02:28Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:agnitum:outpost_firewall:4.0:*:pro:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-16T16:32Z"}