PT-2005-4012 · Webroot · Webroot Desktop Firewall

Tan Chew Keong · Published 2005-10-14 · Updated 2017-07-11 · CVE-2005-3198

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Webroot Desktop Firewall versions prior to 1.3.0build52

Description The issue allows local users to disable the firewall, even when password protection is enabled, via certain DeviceIoControl commands.

Recommendations For versions prior to 1.3.0build52, update to version 1.3.0build52 or later to resolve the issue.

Fix

Related Identifiers

CVE-2005-3198

Affected Products

Webroot Desktop Firewall

References · 11

• http://secunia.com/secunia_research/2005-10/advisory · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-3198 · Security Note
• http://secunia.com/advisories/15745 · Vendor Advisory
• http://vupen.com/english/advisories/2005/1973 · Note
• http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0129.html · Note
• http://osvdb.org/19869 · Note
• http://support.webroot.com/ics/support/KBAnswer.asp?questionID=2332 · Note
• http://securityfocus.com/bid/15016 · Note
• http://securityreason.com/securityalert/55 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22530 · Note
• http://securitytracker.com/id?1015012 · Note