[Vulnerable] Sygate Personal Firewall PRO

Sygate Personal Firewall PRO Fail-Safe Feature Can Be

Local Users
http://www.securitytracker.com/aler...10480.html


Impact: Host/resource access via network, Modification of

information

Exploit Included: Yes
Vendor Confirmed: Yes
Version(s): PRO 5.5 Build 2525

Description: Tan Chew Keong of SIG^2 reported a

Sygate Personal Firewall PRO. A local user or application

the firewall's fail-safe feature.

It is reported that the driver implementation (teefer.sys)

flaw that allows a local application to disable the

Ordinarily, the fail-safe feature will block all traffic

firewall service (smc.exe) is not loaded.

The report indicates that the driver does not authenticate

control codes to ensure that they originated from the firewall
application. As a result, a local application can cause

crash and then can communicate directly with the device
(\\device\Teefer) to disable the fail-safe protection.

The vendor was reportedly notified on May 30, 2004.

The original advisory is available at:
http://www.security.org.sg/vuln/spfp.html

Impact: A local user can disable the fail-safe feature.

Solution: No solution was available at the time of this

vendor is reportedly working on a fix for an upcoming release.
Vendor URL: soho.sygate.com/products/spf_pro.htm (Links

Site)

Cause: Authentication error, State error

Underlying OS: Windows (Any)


Meritorios de Filtrado (Kill-File Global):
tella llop, jm (N.B. 2003.10.25)


"El software propietario sera solo para los que lo puedan

"El software libre es para toda la Humanidad."
.

A local user or application can disable
the firewall's fail-safe feature.



Tella MIRA es VULNERABLE, que vas a decir ahora

Sygate Personal Firewall PRO Fail-Safe Feature Can Be

Bypassed By

Local Users
http://www.securitytracker.com/aler...1010480.ht

Impact: Host/resource access via network, Modification

system

information

Exploit Included: Yes
Vendor Confirmed: Yes
Version(s): PRO 5.5 Build 2525

Description: Tan Chew Keong of SIG^2 reported a

vulnerability in

Sygate Personal Firewall PRO. A local user or application

can disable

the firewall's fail-safe feature.

It is reported that the driver implementation

contains a

flaw that allows a local application to disable the

fail-safe feature.

Ordinarily, the fail-safe feature will block all traffic

when the

firewall service (smc.exe) is not loaded.

The report indicates that the driver does not

received

control codes to ensure that they originated from the

application. As a result, a local application can cause

'smc.exe' to

crash and then can communicate directly with the device
(\\device\Teefer) to disable the fail-safe protection.

The vendor was reportedly notified on May 30, 2004.

The original advisory is available at:
http://www.security.org.sg/vuln/spfp.html

Impact: A local user can disable the fail-safe feature.

Solution: No solution was available at the time of this

entry. The

vendor is reportedly working on a fix for an upcoming

Vendor URL: soho.sygate.com/products/spf_pro.htm (Links

to External

Site)

Cause: Authentication error, State error

Underlying OS: Windows (Any)


Meritorios de Filtrado (Kill-File Global):
tella llop, jm (N.B. 2003.10.25)


"El software propietario sera solo para los que lo puedan

pagar."

"El software libre es para toda la Humanidad."
.

.

Sygate Personal Firewall PRO Fail-Safe Feature Can Be

Local Users
http://www.securitytracker.com/aler...010480.htm

Impact: Host/resource access via network, Modification

information

Exploit Included: Yes
Vendor Confirmed: Yes
Version(s): PRO 5.5 Build 2525

Description: Tan Chew Keong of SIG^2 reported a

Sygate Personal Firewall PRO. A local user or application

the firewall's fail-safe feature.

It is reported that the driver implementation

flaw that allows a local application to disable the fail-

Ordinarily, the fail-safe feature will block all traffic

firewall service (smc.exe) is not loaded.

The report indicates that the driver does not

control codes to ensure that they originated from the

application. As a result, a local application can

crash and then can communicate directly with the device
(\\device\Teefer) to disable the fail-safe protection.

The vendor was reportedly notified on May 30, 2004.

The original advisory is available at:
http://www.security.org.sg/vuln/spfp.html

Impact: A local user can disable the fail-safe feature.

Solution: No solution was available at the time of this

vendor is reportedly working on a fix for an upcoming

Vendor URL: soho.sygate.com/products/spf_pro.htm (Links

Site)

Cause: Authentication error, State error

Underlying OS: Windows (Any)


Meritorios de Filtrado (Kill-File Global):
tella llop, jm (N.B. 2003.10.25)


"El software propietario sera solo para los que lo puedan

"El software libre es para toda la Humanidad."
.

gracias me voy a comprar otro firewall cual me recomiendas
para xp o 2000, eset parece que tiene muchos fallos