CVE

Id
35841  
CVE No.
CVE-2008-5724  
Status
Candidate  
Description
The Personal Firewall driver (aka epfw.sys) 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows local users to gain privileges via a crafted IRP in a certain METHOD_NEITHER IOCTL request to DeviceEpfw that overwrites portions of memory.  
Phase
Assigned (20081226)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
394046 35841 CVE-2008-5724 MISC:http://www.ntinternals.org/ntiadv0807/ntiadv0807.html  View
394047 35841 CVE-2008-5724 CONFIRM:http://www.eset.com/joomla/index.php?option=com_content&task=view&id=4113&Itemid=5  View
394048 35841 CVE-2008-5724 BID:32917  View
394049 35841 CVE-2008-5724 URL:http://www.securityfocus.com/bid/32917  View
394050 35841 CVE-2008-5724 VUPEN:ADV-2008-3456  View
394051 35841 CVE-2008-5724 URL:http://www.vupen.com/english/advisories/2008/3456  View
394052 35841 CVE-2008-5724 SECUNIA:33210  View
394053 35841 CVE-2008-5724 URL:http://secunia.com/advisories/33210  View
394054 35841 CVE-2008-5724 XF:smart-security-epfw-privilege-escalation(47477)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49892 JVNDB-2008-005202 AIST NetCat におけるディレクトリトラバーサルの脆弱性 AIST NetCat には、magic_quotes_gpc が無効になっている、および register_globals が有効になっている際、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2008-5728 35841 5.1 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005202.html  View