Outpost Firewall PRO Local Denial of Service Vulnerability

Bugtraq ID:	20860
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	No
Local:	Yes
Published:	Nov 01 2006 12:00AM
Updated:	Nov 02 2006 05:32PM
Credit:	Matousec Transparent Security discovered this issue.
Vulnerable:	Agnitum Outpost Firewall PRO 4.0 (964.582.059)
Not Vulnerable:

Outpost Firewall PRO Local Denial of Service Vulnerability

Outpost Firewall PRO is prone to a local denial-of-service vulnerability because the application fails to properly handle unexpected input.

Exploiting this issue allows local attackers to crash affected computers, denying service to legitimate users.

Outpost Firewall PRO 4.0 (964.582.059) is vulnerable to this issue; other versions may also be affected.

Outpost Firewall PRO Local Denial of Service Vulnerability

The following exploit is available to demonstrate this issue:

• /data/vulnerabilities/exploits/BTP00001P004AO.zip

Outpost Firewall PRO Local Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

Outpost Firewall PRO Local Denial of Service Vulnerability

References:

• Outpost Firewall Pro Web Page (Agnitum)
  
• Outpost Insufficient validation of 'SandBox' driver input buffer (Matousec - Transparent security Research )