CVE-2007-0333 Path traversal in n/a

High 7.2 Published 18 Jan 2007 Updated 7 Aug 2024

Local attackers can bypass access restrictions to insert malicious drivers into the firewall directory via file link manipulation, leading to privilege escalation.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2007-0333?

CVE-2007-0333 is a high-severity path traversal vulnerability in n/a, published on 18 Jan 2007. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Agnitum Outpost Firewall PRO 4.0 allows local users to bypass access restrictions and insert Trojan horse drivers into the product's installation directory by creating links using FileLinkInformation requests with the ZwSetInformationFile function, as demonstrated by modifying SandBox.sys.

Which versions are affected by CVE-2007-0333?

It affects 1 product.

Products include Agnitum Outpost Firewall.

How do I fix CVE-2007-0333?

No fix has been published for CVE-2007-0333 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2007-0333 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2007-0333 exists.

Public exploit code: 1 Exploit-DB entry.

Sources

Also known as GHSA-h2jj-rw2r-wvgc.