Sygate Personal Firewall DLL Authentication Bypass Vulnerability

Bugtraq ID:	9312
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	No
Local:	Yes
Published:	Dec 29 2003 12:00AM
Updated:	Dec 29 2003 12:00AM
Credit:	Discovery of this vulnerability has been credited to Aphex <[email protected]>.
Vulnerable:	Sygate Sygate Personal Firewall Pro 5.0.1 Sygate Sygate Personal Firewall Pro 5.0 Sygate Sygate Personal Firewall 5.1.1615 Sygate Sygate Personal Firewall 5.0
Not Vulnerable:

Sygate Personal Firewall DLL Authentication Bypass Vulnerability

A vulnerability has been reported to affect Sygate Personal Firewall that may allow a user to bypass DLL authentication controls. The issue has been reported to present itself in the routines that are used to enforce DLL authentication.

A local attacker may exploit this condition to bypass Sygate DLL authentication controls.

Sygate Personal Firewall DLL Authentication Bypass Vulnerability

A custom loader designed as a proof of concept for this issue has bee supplied.

• /data/vulnerabilities/exploits/DllMemoryLoader.zip

Sygate Personal Firewall DLL Authentication Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sygate Personal Firewall DLL Authentication Bypass Vulnerability

References:

• Sygate Homepage (Sygate)