CVE-2007-0333

Agnitum Outpost Firewall PRO 4.0 allows local users to bypass access restrictions and insert Trojan horse drivers into the product's installation directory by creating links using FileLinkInformation requests with the ZwSetInformationFile function, as demonstrated by modifying SandBox.sys.

CVSS v2.0 7.2 HIGH

7.2^/10

CVSS v2.0 : HIGH

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://osvdb.org/33480
http://securityreason.com/securityalert/2163
http://www.matousec.com/info/advisories/Outpost-Bypassing-Self-Protection-using-file-links.php	Vendor Advisory
http://www.securityfocus.com/archive/1/456973/100/0/threaded
http://www.securityfocus.com/bid/22069	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/31529

Configurations

Configuration 1 (hide)

cpe:2.3:a:agnitum:outpost_firewall:4.0:*:pro:*:*:*:*:*

History

No history.

Information

Published : 2007-01-18 02:28

Updated : 2018-10-16 16:32

NVD link : CVE-2007-0333

Mitre link : CVE-2007-0333

CVE.ORG link : CVE-2007-0333

JSON object : View

Products Affected

agnitum

outpost_firewall

CWE

NVD-CWE-Other

{"id": "CVE-2007-0333", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-01-18T02:28:00.000", "references": [{"url": "http://osvdb.org/33480", "source": "cve@mitre.org"}, {"url": "http://securityreason.com/securityalert/2163", "source": "cve@mitre.org"}, {"url": "http://www.matousec.com/info/advisories/Outpost-Bypassing-Self-Protection-using-file-links.php", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/456973/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/22069", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31529", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Agnitum Outpost Firewall PRO 4.0 allows local users to bypass access restrictions and insert Trojan horse drivers into the product's installation directory by creating links using FileLinkInformation requests with the ZwSetInformationFile function, as demonstrated by modifying SandBox.sys."}, {"lang": "es", "value": "Agnitum Outpost Firewall PRO 4.0 permite a un usuario local evitar las restricciones de acceso insertando un ontrolador caballo de troya dentro del directorio de productos de instalaci\u00f3n a trav\u00e9s de la creaci\u00f3n de enlaces utilizando respuestas FileLinkInformation con la funci\u00f3n ZwSetInformationFile como se demostr\u00f3 modificando SandBox.sys."}], "lastModified": "2018-10-16T16:32:16.697", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:agnitum:outpost_firewall:4.0:*:pro:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "672B053D-A9A6-441F-B04A-E654C1445A16"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}