Lavasoft Personal Firewall Local Privilege Escalation Vulnerability

Bugtraq ID:	19018
Class:	Design Error
CVE:	CVE-2006-3697
Remote:	No
Local:	Yes
Published:	Jul 17 2006 12:00AM
Updated:	Jan 11 2007 06:10PM
Credit:	[email protected] discovered this issue.
Vulnerable:	Lavasoft Personal Firewall 1.0.543.5722 (433)
Not Vulnerable:

Lavasoft Personal Firewall Local Privilege Escalation Vulnerability

Lavasoft Personal Firewall will allow local attackers to gain elevated privileges, which may lead to a complete compromise.

Version 1.0.543.5722 (433) is reported vulnerable. Other versions may be affected as well.

Reports indicate that this issue may be related to BID 19024.

Lavasoft Personal Firewall Local Privilege Escalation Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Lavasoft Personal Firewall Local Privilege Escalation Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

Lavasoft Personal Firewall Local Privilege Escalation Vulnerability

References:

• Lavasoft Personal Firewall Web Site (Lavasoft)
  
• Security Advisory 16-jul-2006 (Ben Goulding)