Unscored severity · published Jul 21, 2006
CVE-2006-3697
Agnitum Outpost Firewall Pro 3.51.759.6511 (462), as used in (1) Lavasoft Personal Firewall 1.0.543.5722 (433) and (2) Novell BorderManager Novell Client Firewall 2.0, does not…
–
CVSS
0.5%
EPSS
No
On KEV
Description
Agnitum Outpost Firewall Pro 3.51.759.6511 (462), as used in (1) Lavasoft Personal Firewall 1.0.543.5722 (433) and (2) Novell BorderManager Novell Client Firewall 2.0, does not properly restrict user activities in application windows that run in a LocalSystem context, which allows local users to gain privileges and execute commands (a) via the "open folder" option when no instance of explorer.exe is running, possibly related to the ShellExecute API function; or (b) by overwriting a batch file through the "Save Configuration As" option. NOTE: this might be a vulnerability in Microsoft Windows and explorer.exe instead of the firewall.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 41% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CF
Client Firewall · Novell
2.0 · source: NVD
LP
Lavasoft Personal Firewall · Lavasoft
1.0.543.5722.433 · source: NVD
OF
Outpost Firewall · Agnitum
3.51.759.6511 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3697
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3697
Vendor Advisory
http://secunia.com/advisories/21088
Vendor Advisory
http://secunia.com/advisories/21089
www.ben.goulding.com.au
http://www.ben.goulding.com.au/secad.html
www.osvdb.org
http://www.osvdb.org/27349
www.securityfocus.com
http://www.securityfocus.com/archive/1/440426/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/19018
More from Outpost Firewall
–
CVE-2007-5042
Outpost Firewall Pro 4.0.1025.7828 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a…
–
CVE-2007-3086
Unrestricted critical resource lock in Agnitum Outpost Firewall PRO 4.0 1007.591.145 and earlier allows local users to cause a denial of service (system hang) by capturing the…
–
CVE-2006-7160
The Sandbox.sys driver in Outpost Firewall PRO 4.0, and possibly earlier versions, does not validate arguments to hooked SSDT functions, which allows local users to cause a denial…
–
CVE-2007-0333
Agnitum Outpost Firewall PRO 4.0 allows local users to bypass access restrictions and insert Trojan horse drivers into the product's installation directory by creating links using…
–
CVE-2006-5721
The \Device\SandBox driver in Outpost Firewall PRO 4.0 (964.582.059) allows local users to cause a denial of service (system crash) via an invalid argument to the DeviceIoControl…