CVE-2006-3697

Severity Score

7.2

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Agnitum Outpost Firewall Pro 3.51.759.6511 (462), as used in (1) Lavasoft Personal Firewall 1.0.543.5722 (433) and (2) Novell BorderManager Novell Client Firewall 2.0, does not properly restrict user activities in application windows that run in a LocalSystem context, which allows local users to gain privileges and execute commands (a) via the "open folder" option when no instance of explorer.exe is running, possibly related to the ShellExecute API function; or (b) by overwriting a batch file through the "Save Configuration As" option. NOTE: this might be a vulnerability in Microsoft Windows and explorer.exe instead of the firewall.

Agnitum Outpost Firewall Pro 3.51.759.6511 (462), tal y como se usa en (1) Lavasoft Personal Firewall 1.0.543.5722 (433) y (2) Novell BorderManager Novell Client Firewall 2.0, no restringe de forma adecuada las actividades de usuario para ganar privilegios y ejecutar comandos (a)a través de la opción "abrir carpeta" cuando una instancia de explorer.exe está funcionando, posiblemente relacionado con la función API ShellExecute, o (b) a través de la re-escritura de un fichero de proceso por lotes a través de la opción "Guardar configuración como". NOTA: esto podría estar relacionado con la vulnerabilidad en Microsoft Windows y la instnacia explorer.exe del firewall.

*Credits: N/A

CVSS Scores

NISTv2 7.2

Attack Vector

Local

Attack Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2006-07-18 CVE Reserved
2006-07-19 CVE Published
2023-03-08 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-264: Permissions, Privileges, and Access Controls

CAPEC

References (11)

URL	Tag	Source
http://www.ben.goulding.com.au/secad.html	X_refsource_misc
http://www.osvdb.org/27349	Vdb Entry
http://www.securityfocus.com/archive/1/440426/100/0/threaded	Mailing List
http://www.securityfocus.com/bid/19018	Vdb Entry
http://www.securityfocus.com/bid/19024	Vdb Entry
https://secure-support.novell.com/KanisaPlatform/Publishing/903/3762108_f.SAL_Public.html	X_refsource_confirm

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://secunia.com/advisories/21088	2018-10-18
http://secunia.com/advisories/21089	2018-10-18
http://www.vupen.com/english/advisories/2006/2851	2018-10-18
http://www.vupen.com/english/advisories/2006/2852	2018-10-18
http://www.vupen.com/english/advisories/2007/0144	2018-10-18

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Agnitum Search vendor "Agnitum"		Outpost Firewall Search vendor "Agnitum" for product "Outpost Firewall"				3.51.759.6511 Search vendor "Agnitum" for product "Outpost Firewall" and version "3.51.759.6511"		-		Affected
Lavasoft Search vendor "Lavasoft"		Lavasoft Personal Firewall Search vendor "Lavasoft" for product "Lavasoft Personal Firewall"				1.0.543.5722.433 Search vendor "Lavasoft" for product "Lavasoft Personal Firewall" and version "1.0.543.5722.433"		-		Affected
Novell Search vendor "Novell"		Client Firewall Search vendor "Novell" for product "Client Firewall"				2.0 Search vendor "Novell" for product "Client Firewall" and version "2.0"		-		Affected