CVE

Id
26086  
CVE No.
CVE-2007-2729  
Status
Candidate  
Description
Comodo Firewall Pro 2.4.18.184 and Comodo Personal Firewall 2.3.6.81, and probably older Comodo Firewall versions, do not properly test for equivalence of process identifiers for certain Microsoft Windows API functions in the NT kernel 5.0 and greater, which allows local users to call these functions, and bypass firewall rules or gain privileges, via a modified identifier that is one, two, or three greater than the canonical identifier.  
Phase
Assigned (20070516)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
262422 26086 CVE-2007-2729 BUGTRAQ:20070515 Bypassing PFW/HIPS open process control with uncommon identifier  View
262423 26086 CVE-2007-2729 URL:http://www.securityfocus.com/archive/1/archive/1/468643/100/0/threaded  View
262424 26086 CVE-2007-2729 MISC:http://www.matousec.com/info/advisories/Bypassing-PWF-HIPS-open-process-control-with-uncommon-identifier.php  View
262425 26086 CVE-2007-2729 OSVDB:37375  View
262426 26086 CVE-2007-2729 URL:http://osvdb.org/37375  View
262427 26086 CVE-2007-2729 SREASON:2714  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55176 JVNDB-2007-003868 Jetbox CMS の formmail.php における CRLF インジェクションの脆弱性 Jetbox CMS の formmail.php には、CRLF インジェクションの脆弱性が存在します。 CVE-2007-2731 26086 4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003868.html  View