PT-2006-7223 · Filseclab · Filseclab Personal Firewall

Published 2006-12-18 · Updated 2018-10-17 · CVE-2006-6621

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Filseclab Personal Firewall version 3.0.0.8686

Description The issue allows local users to bypass the product's controls on a process by spoofing certain fields in the Process Environment Block (PEB), specifically the ImagePathName, CommandLine, and WindowTitle fields. This could potentially lead to unauthorized access or control.

Recommendations For Filseclab Personal Firewall version 3.0.0.8686, consider restricting access to sensitive processes until a patch is available. As a temporary workaround, monitor system activity closely for any signs of unauthorized access or process manipulation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-6621

Affected Products

Filseclab Personal Firewall

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2006-6621 · Security Note
• http://matousec.com/info/advisories/Bypassing-process-identification-serveral-personal-firewalls-HIPS.php · Vendor Advisory
• http://securityfocus.com/archive/1/454522/100/0/threaded · Note
• http://matousec.com/downloads/windows-personal-firewall-analysis/ex-coat.zip · Note
• http://securityfocus.com/bid/21615 · Note