bugtraq - SymEvent Driver Local Access System Denial of Service

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <45F81464.4060301@matousec.com>
Date: Wed, 14 Mar 2007 16:27:32 +0100
From: Matousec - Transparent security Research <research@...ousec.com>
To: Secunia Research <vuln@...unia.com>, bugtraq@...urityfocus.com,
	secure@...antec.com
Subject: SymEvent Driver Local Access System Denial of Service

Hello,

Today, we have accidentally discovered that the vulnerability, which is described here

http://www.symantec.com/avcenter/security/Content/2006.09.20a.html

and its third party identifications are

BID:               20051
Secunia Advisory:  SA21938
CVE:               CVE-2006-4855

is active again in the today's update of Norton Personal Firewall 2006 version 9.1.1.7.
Probably, some changes have been made in the SymEvent driver since it was fixed
that causes that the driver is vulnerable again.

The version of symevent.sys on the testing system is 12.0.0.20.

Kind Regards,

-- 
Matousec - Transparent security Research
http://www.matousec.com/