FortKnox Personal Firewall 'fortknoxfw.sys' Driver Local Privilege Escalation Vulnerability

Bugtraq ID:	63372
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Oct 24 2013 12:00AM
Updated:	Oct 24 2013 12:00AM
Credit:	Arash Allebrahim
Vulnerable:	NETGATE Technologies s.r.o FortKnox Personal Firewall 9.0.305.0 NETGATE Technologies s.r.o FortKnox Personal Firewall 10.0.305.0
Not Vulnerable:

FortKnox Personal Firewall 'fortknoxfw.sys' Driver Local Privilege Escalation Vulnerability

FortKnox Personal Firewall is prone to a local privilege-escalation vulnerability because it fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.

A local attacker can exploit this issue to execute arbitrary code with elevated privileges. Successful exploits will result in the complete compromise of affected computers. Failed exploit attempts may cause a denial-of-service condition.

FortKnox Personal Firewall 9.0.305.0 and 10.0.305.0 are vulnerable.

FortKnox Personal Firewall 'fortknoxfw.sys' Driver Local Privilege Escalation Vulnerability

The following proof-of-concept is available:

• /data/vulnerabilities/exploits/63372.cpp

FortKnox Personal Firewall 'fortknoxfw.sys' Driver Local Privilege Escalation Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

FortKnox Personal Firewall 'fortknoxfw.sys' Driver Local Privilege Escalation Vulnerability

References:

• FortKnox Personal Firewall HomePage (NETGATE Technologies s.r.o. )