[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <44C268D1.4050100@herr-der-mails.de>
Date: Sat, 22 Jul 2006 20:05:05 +0200
From: "H. Wiedemann" <dpr@...r-der-mails.de>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: Outpost Firewall vulnerability, users gaining
system rights
And an even more simple method in version 3.51.759.xxxx:
"Options - Application - Components - Edit List - Add"
This dialog doesn't have a disabled context menu, so just go to the
windows\system32 folder, right click on "cmd.exe" and choose "open".
More vulnerabilites to come unless Agnitum separates the service and the
GUI parts ;)
--
H. WIEDEMANN
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Powered by blists - more mailing lists