PT-2007-4378 · Agnitum · Agnitum Outpost Firewall Pro

Publicado 2007-06-06 · Atualizado 2018-10-16 · CVE-2007-3086

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Agnitum Outpost Firewall PRO versions 4.0 1007.591.145 and earlier

Description: The issue is related to an unrestricted critical resource lock that allows local users to cause a denial of service, resulting in a system hang. This occurs when the outpost ipc hdr mutex is captured.

Recommendations: For Agnitum Outpost Firewall PRO versions 4.0 1007.591.145 and earlier, consider restricting access to the outpost ipc hdr mutex to prevent the denial of service. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Identificadores relacionados

CVE-2007-3086

Produtos afetados

Agnitum Outpost Firewall Pro

Referências · 8

• 🔥 https://exploit-db.com/exploits/30139 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34686 · Nota
• http://securityfocus.com/bid/24284 · Nota
• http://matousec.com/info/advisories/Outpost-Enforcing-system-reboot-with-outpost_ipc_hdr-mutex.php · Nota
• http://securityfocus.com/archive/1/470278/100/0/threaded · Nota
• http://osvdb.org/42038 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-3086 · Nota de Segurança
• http://securityreason.com/securityalert/2775 · Nota