CVE-2007-0333 json
Agnitum Outpost Firewall PRO 4.0 allows local users to bypass access restrictions and insert Trojan horse drivers into the product's instal…
published 2007-01-18 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-0335
- cvss
- 7.2
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.9%
- EPSS 0.9% chance of exploitation in 30 days, percentile 60%
- public exploits
- 1
- Exploit-DB
Summary
Agnitum Outpost Firewall PRO 4.0 allows local users to bypass access restrictions and insert Trojan horse drivers into the product's installation directory by creating links using FileLinkInformation requests with the ZwSetInformationFile function, as demonstrated by modifying SandBox.sys.
Timeline
- First public exploit (EDB-29465)
- Published
Exploit prediction
0.92% chance of exploitation in the next 30 days, higher than 60% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-29465 Outpost Firewall PRO 4.0 - Local Privilege Escalation local, 2007-01-15
- securityfocus.com http://www.securityfocus.com/bid/22069 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C |
References
-
securityfocus.com
/bid/22069
vdb-entry, exploit
-
matousec.com
/info/advisories/Outpost-Bypassing-Self-Protection-using-file-links.php
vendor-advisory
-
securityfocus.com
/archive/1/456973/100/0/threaded
mailing-list
-
osvdb.org
/33480
vdb-entry
-
securityreason.com
/securityalert/2163
third-party-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/31529
vdb-entry
Sources
- CVE List CVE-2007-0333
- NVD CVE-2007-0333
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.