Vulnerabilities > CVE-2007-0333 - Local Privilege Escalation vulnerability in Agnitum Outpost Firewall 4.0

047910
CVSS 7.2 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
low complexity
agnitum
exploit available
NVD
Published: 2007-01-18
Updated: 2018-10-16

Summary

Agnitum Outpost Firewall PRO 4.0 allows local users to bypass access restrictions and insert Trojan horse drivers into the product's installation directory by creating links using FileLinkInformation requests with the ZwSetInformationFile function, as demonstrated by modifying SandBox.sys.

Vulnerable Configurations

Part Description Count
Application
Agnitum
1

Exploit-Db

descriptionOutpost Firewall PRO 4.0 Local Privilege Escalation Vulnerability. CVE-2007-0333. Local exploit for windows platform
idEDB-ID:29465
last seen2016-02-03
modified2007-01-15
published2007-01-15
reporterMatousec Transparent security
sourcehttps://www.exploit-db.com/download/29465/
titleOutpost Firewall PRO 4.0 - Local Privilege Escalation Vulnerability

References