PT-2011-2530 · Look 'N' Stop · Look 'N' Stop Firewall

Heurs · Publicado 2011-01-28 · Atualizado 2017-08-17 · CVE-2011-0652

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Look 'n' Stop Firewall versions 2.06p4 through 2.07

Description The issue allows local users to cause a denial of service, resulting in a system crash. This is achieved by sending a crafted 0x80000064 IOCTL request, which triggers an assertion failure.

Recommendations For Look 'n' Stop Firewall versions 2.06p4 through 2.07, consider restricting access to the lnsfw1.sys driver to minimize the risk of exploitation. As a temporary workaround, avoid using the 0x80000064 IOCTL request until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2011-0652

Produtos afetados

Look 'N' Stop Firewall

Referências · 7

• 🔥 http://exploit-db.com/exploits/16021 · Exploit
• 🔥 http://securityfocus.com/bid/45949 · Exploit
• 🔥 https://exploit-db.com/exploits/16021 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-0652 · Nota de Segurança
• http://secunia.com/advisories/43044 · Aviso do Fabricante
• http://osvdb.org/70638 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64851 · Nota