us.cert.gov bulletin - Vulnerability Summary for the Week of May 14, 2007

Dual booters should take note of continuing vulnerabilities in certain
NT5(+) based applications, and other indications OS related.

http://www.us-cert.gov/cas/bulletins/SB07-141.html

Comodo -- Comodo Personal Firewall
Comodo -- Comodo Firewall Pro
Comodo Firewall Pro 2.4.18.184 and Comodo Personal Firewall 2.3.6.81, and
probably older Comodo Firewall versions, do not properly test for
equivalence of process identifiers for certain Microsoft Windows API
functions in the NT kernel 5.0 and greater, which allows local users to call
these functions, and bypass firewall rules or gain privileges, via a
modified identifier that is one, two, or three greater than the canonical
identifier. unknown
2007-05-16
7.0 CVE-2007-2729
BUGTRAQ
OTHER-REF

Comodo -- Comodo Personal Firewall
Comodo -- Comodo Firewall Pro
Check Point Software -- ZoneAlarm
Check Point ZoneAlarm Pro before 6.5.737.000 does not properly test for
equivalence of process identifiers for certain Microsoft Windows API
functions in the NT kernel 5.0 and greater, which allows local users to call
these functions, and bypass firewall rules or gain privileges, via a
modified identifier that is one, two, or three greater than the canonical
identifier. unknown
2007-05-16
7.0 CVE-2007-2730
BUGTRAQ
OTHER-REF -
http://www.matousec.com/info/advisor...identifier.php

Computer Associates -- eTrust Integrated Threat Management
Computer Associates -- eTrust PestPatrol
Computer Associates -- eTrust EZ Antivirus
Stack-based buffer overflow in the inoweb Console Server in CA Anti-Virus
for the Enterprise r8, Threat Manager r8, Anti-Spyware for the Enterprise
r8, and Protection Suites r3 allows remote attackers to execute arbitrary
code via a long (1) username or (2) password. unknown
2007-05-11
10.0 CVE-2007-2522
OTHER-REF
BID
FRSIRT
BUGTRAQ
OTHER-REF
CERT-VN
SECTRACK
SECUNIA - http://secunia.com/advisories/25202

Computer Associates -- Integrated Threat Management
Computer Associates -- Anti-Virus
CA Anti-Virus for the Enterprise r8 and Threat Manager r8 before 20070510
use weak permissions (NULL security descriptor) for the Task Service shared
file mapping, which allows local users to modify this mapping and gain
privileges by triggering a stack-based buffer overflow in InoCore.dll before
8.0.448.0. unknown
2007-05-11
7.0 CVE-2007-2523
IDEFENSE
OTHER-REF
BID
FRSIRT
BUGTRAQ
OTHER-REF
CERT-VN
SECTRACK
SECUNIA - http://secunia.com/advisories/25202

--
MEB
http://peoplescounsel.orgfree.com/
_______________