Outpost Firewall PRO Local Privilege Escalation Vulnerability

Bugtraq ID:	19024
Class:	Design Error
CVE:	CVE-2006-3697
Remote:	No
Local:	Yes
Published:	Jul 17 2006 12:00AM
Updated:	Jan 11 2007 05:50PM
Credit:	[email protected] is credited with discovering this issue.
Vulnerable:	Novell Client Firewall 2.0 Novell BorderManager 3.8 Novell BorderManager 3.7 Agnitum Outpost Firewall 3.51.759.6511 (462)
Not Vulnerable:

Outpost Firewall PRO Local Privilege Escalation Vulnerability

Outpost Firewall PRO will allow local attackers to gain elevated privileges, which may lead to a complete compromise.

Version 3.51.759.6511 (462) is reported vulnerable. Other versions may be affected as well.

Outpost Firewall PRO Local Privilege Escalation Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Outpost Firewall PRO Local Privilege Escalation Vulnerability

Solution:
Reportedly, this issue has been fixed in version 4.0. Symantec has not confirmed this.

Please see the referenced advisories for more information.

Outpost Firewall PRO Local Privilege Escalation Vulnerability

References:

• Novell client firewall (NCF) 2.x exploited to gain escalated privileges (Novell)
  
• Outpost Firewall Pro Web Page (Agnitum)
  
• Outpost Firewall vulnerability, users gaining system rights (H. Wiedemann )
  
• Security Advisory 16-jul-2006 (Ben Goulding)