RETIRED: Symantec Norton Personal Firewall SuiteOwners Registry Key Security Bypass Vulnerability
BID:19585
CVE-2006-4266 |Info
RETIRED: Symantec Norton Personal Firewall SuiteOwners Registry Key Security Bypass Vulnerability
| Bugtraq ID: | 19585 |
| Class: | Access Validation Error |
| CVE: |
CVE-2006-4266 |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 18 2006 12:00AM |
| Updated: | Jul 13 2007 06:36PM |
| Credit: | David Matousek is credited with the discovery of this vulnerability. |
| Vulnerable: |
Symantec Norton Personal Firewall 2006 |
| Not Vulnerable: | |
Discussion
RETIRED: Symantec Norton Personal Firewall SuiteOwners Registry Key Security Bypass Vulnerability
Symantec Norton Personal Firewall is prone to a security-bypass vulnerability, allowing an attacker to potentially bypass security measures that are used to prevent modification of registry keys that are related to the affected software.
An attacker may exploit this vulnerability to bypass Norton's registry protection mechanism and modify the 'SuiteOwners' registry entry to load an arbitrary library file. This will likely lead to further attacks.
The individual who discovered this issue claims to have tested it on Norton Personal Firewall 2006 version 9.1.0.33. Other versions could also be affected. Norton Internet Security products that include the vulnerable application may also be affected.
RETIRED: This BID is being retired; further investigation indicates that the application is not vulnerable to this issue.
Symantec Norton Personal Firewall is prone to a security-bypass vulnerability, allowing an attacker to potentially bypass security measures that are used to prevent modification of registry keys that are related to the affected software.
An attacker may exploit this vulnerability to bypass Norton's registry protection mechanism and modify the 'SuiteOwners' registry entry to load an arbitrary library file. This will likely lead to further attacks.
The individual who discovered this issue claims to have tested it on Norton Personal Firewall 2006 version 9.1.0.33. Other versions could also be affected. Norton Internet Security products that include the vulnerable application may also be affected.
RETIRED: This BID is being retired; further investigation indicates that the application is not vulnerable to this issue.
Exploit / POC
RETIRED: Symantec Norton Personal Firewall SuiteOwners Registry Key Security Bypass Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Solution / Fix
RETIRED: Symantec Norton Personal Firewall SuiteOwners Registry Key Security Bypass Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].
References
RETIRED: Symantec Norton Personal Firewall SuiteOwners Registry Key Security Bypass Vulnerability
References:
References:
- Symantec Homepage (Symantec)
- Norton DLL faking via 'SuiteOwners' protection bypass Vulnerability (David Matousek)