PT-2011-2530 · Look 'N' Stop · Look 'N' Stop Firewall

Heurs · Published 2011-01-28 · Updated 2017-08-17 · CVE-2011-0652

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Look 'n' Stop Firewall versions 2.06p4 through 2.07

Description The issue allows local users to cause a denial of service, resulting in a system crash. This is achieved by sending a crafted 0x80000064 IOCTL request, which triggers an assertion failure.

Recommendations For Look 'n' Stop Firewall versions 2.06p4 through 2.07, consider restricting access to the lnsfw1.sys driver to minimize the risk of exploitation. As a temporary workaround, avoid using the 0x80000064 IOCTL request until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2011-0652

Affected Products

Look 'N' Stop Firewall

References · 7

• 🔥 http://exploit-db.com/exploits/16021 · Exploit
• 🔥 http://securityfocus.com/bid/45949 · Exploit
• 🔥 https://exploit-db.com/exploits/16021 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-0652 · Security Note
• http://secunia.com/advisories/43044 · Vendor Advisory
• http://osvdb.org/70638 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64851 · Note