PT-2006-7223 · Filseclab · Filseclab Personal Firewall

Publicado 2006-12-18 · Atualizado 2018-10-17 · CVE-2006-6621

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Filseclab Personal Firewall version 3.0.0.8686

Description The issue allows local users to bypass the product's controls on a process by spoofing certain fields in the Process Environment Block (PEB), specifically the ImagePathName, CommandLine, and WindowTitle fields. This could potentially lead to unauthorized access or control.

Recommendations For Filseclab Personal Firewall version 3.0.0.8686, consider restricting access to sensitive processes until a patch is available. As a temporary workaround, monitor system activity closely for any signs of unauthorized access or process manipulation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-6621

Produtos afetados

Filseclab Personal Firewall

Referências · 5

• http://securityfocus.com/archive/1/454522/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-6621 · Nota de Segurança
• http://matousec.com/downloads/windows-personal-firewall-analysis/ex-coat.zip · Nota
• http://securityfocus.com/bid/21615 · Nota
• http://matousec.com/info/advisories/Bypassing-process-identification-serveral-personal-firewalls-HIPS.php · Aviso do Fabricante