CVE-2006-5721: agnitum outpost_firewall

EPSS trend

Probability

0.98%

Chance of exploitation in the next 30 days

Percentile

62%

Versus all other CVEs

30-day change

0.00 pp

From 0.98% on 20-09-2026

20-09-202620-10-2026

EPSS score

0.98%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databasedoswindowsVerified
Outpost Firewall PRO 4.0 - Local Denial of Service
Maturity: poc

References

8 links

exchange.xforce.ibmcloud.com/vulnerabilities/29969VDB EntryX Refsource XF
www.vupen.com/english/advisories/2006/4309VDB EntryX Refsource VUPEN
www.securityfocus.com/bid/20860VDB EntryX Refsource BIDExploit
secunia.com/advisories/22673Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.matousec.com/info/advisories/Outpost-Insufficient-validation-of-SandBox-driver-input-buffer.phpX Refsource MISCVendor Advisory
securityreason.com/securityalert/1821Third Party AdvisoryX Refsource SREASON
securitytracker.com/id?1017150VDB EntryX Refsource SECTRACK
www.securityfocus.com/archive/1/450293/100/0/threadedMailing ListX Refsource BUGTRAQ

Related vulnerabilities

CVE-2007-0333agnitumoutpost_firewall0.92%19y ago18-01-2007 02:00Agnitum Outpost Firewall PRO 4.0 allows local users to bypass access restrictions and insert Trojan horse drivers into the product's installation directory by creating links using FileLinkInformation requests with the ZwSetInformationFile function, as demonstrated by modifying SandBox.sys.CVE-2007-5042agnitumoutpost_firewall0.31%19y ago24-09-2007 00:00Outpost Firewall Pro 4.0.1025.7828 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the (1) NtCreateKey, (2) NtDeleteFile, (3) NtLoadDriver, (4) NtOpenProcess, (5) NtOpenSection, (6) NtOpenThread, and (7) NtUnloadDriver kernel SSDT hooks, a partial regression of CVE-2006-7160.CVE-2007-3086agnitumoutpost_firewall0.68%19y ago06-06-2007 10:00Unrestricted critical resource lock in Agnitum Outpost Firewall PRO 4.0 1007.591.145 and earlier allows local users to cause a denial of service (system hang) by capturing the outpost_ipc_hdr mutex.CVE-2004-2472agnitumoutpost_firewall1.75%21y ago20-08-2005 04:00Agnitum Outpost Pro Firewall 2.1 allows remote attackers to cause a denial of service (CPU consumption) via a flood of small, invalid packets, which can not be processed quickly enough by Outpost Pro.CVE-2006-7160agnitumoutpost_firewall0.37%19y ago07-03-2007 20:00The Sandbox.sys driver in Outpost Firewall PRO 4.0, and possibly earlier versions, does not validate arguments to hooked SSDT functions, which allows local users to cause a denial of service (crash) via invalid arguments to the (1) NtAssignProcessToJobObject,, (2) NtCreateKey, (3) NtCreateThread, (4) NtDeleteFile, (5) NtLoadDriver, (6) NtOpenProcess, (7) NtProtectVirtualMemory, (8) NtReplaceKey, (9) NtTerminateProcess, (10) NtTerminateThread, (11) NtUnloadDriver, and (12) NtWriteVirtualMemory functions.CVE-2006-3697agnitumoutpost_firewall+20.48%20y ago19-07-2006 01:00Agnitum Outpost Firewall Pro 3.51.759.6511 (462), as used in (1) Lavasoft Personal Firewall 1.0.543.5722 (433) and (2) Novell BorderManager Novell Client Firewall 2.0, does not properly restrict user activities in application windows that run in a LocalSystem context, which allows local users to gain privileges and execute commands (a) via the "open folder" option when no instance of explorer.exe is running, possibly related to the ShellExecute API function; or (b) by overwriting a batch file through the "Save Configuration As" option. NOTE: this might be a vulnerability in Microsoft Windows and explorer.exe instead of the firewall.

All vulnerabilities inoutpost_firewall

CVE-2006-5721: agnitum outpost_firewall

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References