Outpost Firewall PRO Local Privilege Escalation Vulnerability

Bugtraq ID:	22069
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Jan 15 2007 12:00AM
Updated:	Jan 16 2007 08:20PM
Credit:	This issue was discovered by Matousec <[email protected]>.
Vulnerable:	Agnitum Outpost Firewall PRO 4.0 (971.584.079) Agnitum Outpost Firewall PRO 4.0 (964.582.059) Agnitum Outpost Firewall PRO 4.0 (1005.590.123) Agnitum Outpost Firewall PRO 4.0
Not Vulnerable:

Outpost Firewall PRO Local Privilege Escalation Vulnerability

Outpost Firewall PRO is prone to a local privilege-escalation vulnerability because it fails to perform adequate SSDT (System Service Descriptor Table) hooking on files in its installation directory.

A local attacker can exploit this issue to elevate their privileges, which can lead to the complete compromise of an affected computer.

Outpost Firewall PRO 4.0 is vulnerable; other versions may also be affected.

Outpost Firewall PRO Local Privilege Escalation Vulnerability

The following proof of concept is available:

• /data/vulnerabilities/exploits/22069.zip

Outpost Firewall PRO Local Privilege Escalation Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

Outpost Firewall PRO Local Privilege Escalation Vulnerability

References:

• Outpost Firewall Pro Web Page (Agnitum)
  
• Outpost Bypassing Self-Protection using file links Vulnerability (Matousec)