PT-2009-4867 · Online Armor · Online Armor Personal Firewall

Publicado 2009-07-13 · Atualizado 2017-09-19 · CVE-2009-2450

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Online Armor Personal Firewall AV+ versions 3.1.0.0 through 3.5.0.11 Online Armor Personal Firewall versions 3.1.0.0 through 3.5.0.13

Description The issue allows local users to gain privileges via crafted METHOD NEITHER IOCTL requests to DeviceOAmon containing arbitrary kernel addresses. This can be demonstrated using the 0x830020C3 IOCTL.

Recommendations For Online Armor Personal Firewall AV+ versions 3.1.0.0 through 3.5.0.11, update to version 3.5.0.12 or later. For Online Armor Personal Firewall versions 3.1.0.0 through 3.5.0.13, update to version 3.5.0.14 or later.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2009-2450

Produtos afetados

Online Armor Personal Firewall

Referências · 7

• 🔥 http://securityfocus.com/bid/35227 · Exploit
• 🔥 http://exploit-db.com/exploits/8875 · Exploit
• 🔥 https://exploit-db.com/exploits/8875 · Exploit
• 🔥 http://milw0rm.com/sploits/2009-OAmon_Exp.zip · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50960 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-2450 · Nota de Segurança
• http://ntinternals.org/ntiadv0806/ntiadv0806.html · Nota