Agnitum Outpost Firewall vulnerabilities

CVE-2007-0333 [HIGH] CVE-2007-0333: Agnitum Outpost Firewall PRO 4.0 allows local users to bypass access restrictions and insert Trojan Agnitum Outpost Firewall PRO 4.0 allows local users to bypass access restrictions and insert Trojan horse drivers into the product's installation directory by creating links using FileLinkInformation requests with the ZwSetInformationFile function, as demonstrated by modifying SandBox.sys.

CVE-2006-5721 [MEDIUM] CVE-2006-5721: The \Device\SandBox driver in Outpost Firewall PRO 4.0 (964.582.059) allows local users to cause a d The \Device\SandBox driver in Outpost Firewall PRO 4.0 (964.582.059) allows local users to cause a denial of service (system crash) via an invalid argument to the DeviceIoControl function that triggers an invalid memory operation.

CVE-2007-3086 [MEDIUM] CVE-2007-3086: Unrestricted critical resource lock in Agnitum Outpost Firewall PRO 4.0 1007.591.145 and earlier all Unrestricted critical resource lock in Agnitum Outpost Firewall PRO 4.0 1007.591.145 and earlier allows local users to cause a denial of service (system hang) by capturing the outpost_ipc_hdr mutex.

CVE-2006-3696 [LOW] CVE-2006-3696: filtnt.sys in Outpost Firewall Pro before 3.51.759.6511 (462) allows local users to cause a denial o filtnt.sys in Outpost Firewall Pro before 3.51.759.6511 (462) allows local users to cause a denial of service (crash) via long arguments to mshta.exe.

CVE-2006-3697 [HIGH] CWE-264 CVE-2006-3697: Agnitum Outpost Firewall Pro 3.51.759.6511 (462), as used in (1) Lavasoft Personal Firewall 1.0.543. Agnitum Outpost Firewall Pro 3.51.759.6511 (462), as used in (1) Lavasoft Personal Firewall 1.0.543.5722 (433) and (2) Novell BorderManager Novell Client Firewall 2.0, does not properly restrict user activities in application windows that run in a LocalSystem context, which allows local users to gain privileges and execute commands (a) via the "open fol

CVE-2004-2472 [MEDIUM] CVE-2004-2472: Agnitum Outpost Pro Firewall 2.1 allows remote attackers to cause a denial of service (CPU consumpti Agnitum Outpost Pro Firewall 2.1 allows remote attackers to cause a denial of service (CPU consumption) via a flood of small, invalid packets, which can not be processed quickly enough by Outpost Pro.

CVE-2006-7160 [MEDIUM] CWE-20 CVE-2006-7160: The Sandbox.sys driver in Outpost Firewall PRO 4.0, and possibly earlier versions, does not validate The Sandbox.sys driver in Outpost Firewall PRO 4.0, and possibly earlier versions, does not validate arguments to hooked SSDT functions, which allows local users to cause a denial of service (crash) via invalid arguments to the (1) NtAssignProcessToJobObject,, (2) NtCreateKey, (3) NtCreateThread, (4) NtDeleteFile, (5) NtLoadDriver, (6) NtOpenProcess, (

CVE-2007-5042 [MEDIUM] CVE-2007-5042: Outpost Firewall Pro 4.0.1025.7828 does not properly validate certain parameters to System Service D Outpost Firewall Pro 4.0.1025.7828 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the (1) NtCreateKey, (2) NtDeleteFile, (3) NtLoadDriver, (4) NtOpenProcess, (5) NtOpenSection, (6) NtOpenThread, and (7) NtU