Webroot Software My Firewall Plus Local Privilege Escalation Vulnerability

Bugtraq ID:	12064
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Dec 21 2004 12:00AM
Updated:	Dec 21 2004 12:00AM
Credit:	Discovery is credited to Carsten Eiram.
Vulnerable:	Webroot Software My Firewall Plus 5.0
Not Vulnerable:

Webroot Software My Firewall Plus Local Privilege Escalation Vulnerability

My Firewall Plus is reported prone to a local privilege escalation vulnerability. This vulnerability arises due to a design error causing the software to launch a help application with SYSTEM privileges.

My Firewall Plus 5.0 is reported vulnerable to this issue, however, it is possible that other versions are affected as well.

Webroot Software My Firewall Plus Local Privilege Escalation Vulnerability

There is no exploit required.

Webroot Software My Firewall Plus Local Privilege Escalation Vulnerability

Solution:
The vendor has released a patch to address this issue:


Webroot Software My Firewall Plus 5.0

• Webroot Software MFP_Patch.exe
  http://www.webroot.com/services/MFP_Patch.exe

Webroot Software My Firewall Plus Local Privilege Escalation Vulnerability

References:

• My Firewall Plus Privilege Escalation Vulnerabilities (Secunia)
  
• My Firewall Plus Product Page (Webroot Software)