ATGuard Personal Firewall Outgoing Connection Restriction Bypass Vulnerability
BID:4620
Info
ATGuard Personal Firewall Outgoing Connection Restriction Bypass Vulnerability
| Bugtraq ID: | 4620 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Apr 29 2002 12:00AM |
| Updated: | Apr 29 2002 12:00AM |
| Credit: | Discovered by BlueScreen <[email protected]>. |
| Vulnerable: |
ATGuard ATGuard Personal Firewall 3.2 |
| Not Vulnerable: | |
Discussion
ATGuard Personal Firewall Outgoing Connection Restriction Bypass Vulnerability
An issue has been reported in ATGuard Personal Firewall. Reportedly, it is possible for a user to bypass the security restrictions of ATGuard.
This is achieved by renaming the restricted web application with an authorized application name.
For example, if icq.exe is a restricted service and, iexplore.exe is an authorized application. By renaming icq.exe to iexplore.exe, ATGuard will permit the use of the application.
It should be noted that ATGuard Firewall was acquired by Symantec, support for this product may no longer be available.
An issue has been reported in ATGuard Personal Firewall. Reportedly, it is possible for a user to bypass the security restrictions of ATGuard.
This is achieved by renaming the restricted web application with an authorized application name.
For example, if icq.exe is a restricted service and, iexplore.exe is an authorized application. By renaming icq.exe to iexplore.exe, ATGuard will permit the use of the application.
It should be noted that ATGuard Firewall was acquired by Symantec, support for this product may no longer be available.
Exploit / POC
ATGuard Personal Firewall Outgoing Connection Restriction Bypass Vulnerability
No exploit code required.
No exploit code required.
Solution / Fix
ATGuard Personal Firewall Outgoing Connection Restriction Bypass Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
ATGuard Personal Firewall Outgoing Connection Restriction Bypass Vulnerability
References:
References: