Login Request a demo
Unscored severity · published Jan 18, 2007
CVE-2007-0333
Agnitum Outpost Firewall PRO 4.0 allows local users to bypass access restrictions and insert Trojan horse drivers into the product's installation directory by creating links using…
–
CVSS
0.9%
EPSS
No
On KEV
Description
Agnitum Outpost Firewall PRO 4.0 allows local users to bypass access restrictions and insert Trojan horse drivers into the product's installation directory by creating links using FileLinkInformation requests with the ZwSetInformationFile function, as demonstrated by modifying SandBox.sys.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 60% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OF
Outpost Firewall · Agnitum
4.0 · source: NVD
Affected product
OF
Outpost Firewall
Agnitum
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0333
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0333
osvdb.org
http://osvdb.org/33480
securityreason.com
http://securityreason.com/securityalert/2163
Vendor Advisory
http://www.matousec.com/info/advisories/Outpost-Bypassing-Self-Protection-using-file-links.php
www.securityfocus.com
http://www.securityfocus.com/archive/1/456973/100/0/threaded
Exploit
http://www.securityfocus.com/bid/22069
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/31529
More from Outpost Firewall
–
CVE-2007-5042
Outpost Firewall Pro 4.0.1025.7828 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a…
–
CVE-2007-3086
Unrestricted critical resource lock in Agnitum Outpost Firewall PRO 4.0 1007.591.145 and earlier allows local users to cause a denial of service (system hang) by capturing the…
–
CVE-2006-7160
The Sandbox.sys driver in Outpost Firewall PRO 4.0, and possibly earlier versions, does not validate arguments to hooked SSDT functions, which allows local users to cause a denial…
–
CVE-2006-5721
The \Device\SandBox driver in Outpost Firewall PRO 4.0 (964.582.059) allows local users to cause a denial of service (system crash) via an invalid argument to the DeviceIoControl…
–
CVE-2006-3697
Agnitum Outpost Firewall Pro 3.51.759.6511 (462), as used in (1) Lavasoft Personal Firewall 1.0.543.5722 (433) and (2) Novell BorderManager Novell Client Firewall 2.0, does not…