Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2006-3697 Details

Description

Agnitum Outpost Firewall Pro 3.51.759.6511 (462), as used in (1) Lavasoft Personal Firewall 1.0.543.5722 (433) and (2) Novell BorderManager Novell Client Firewall 2.0, does not properly restrict user activities in application windows that run in a LocalSystem context, which allows local users to gain privileges and execute commands (a) via the "open folder" option when no instance of explorer.exe is running, possibly related to the ShellExecute API function; or (b) by overwriting a batch file through the "Save Configuration As" option. NOTE: this might be a vulnerability in Microsoft Windows and explorer.exe instead of the firewall.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://secunia.com/advisories/21088	CVE	Vendor Advisory
http://secunia.com/advisories/21089	CVE	Vendor Advisory
https://secure-support.novell.com/KanisaPlatform/Publishing/903/3762108_f.SAL_Public.html	CVE
http://www.ben.goulding.com.au/secad.html	CVE
http://www.osvdb.org/27349	CVE
http://www.securityfocus.com/archive/1/440426/100/0/threaded	CVE
http://www.securityfocus.com/bid/19018	CVE
http://www.securityfocus.com/bid/19024	CVE
http://www.vupen.com/english/advisories/2006/2851	CVE	Vendor Advisory
http://www.vupen.com/english/advisories/2006/2852	CVE	Vendor Advisory
http://www.vupen.com/english/advisories/2007/0144	CVE	Vendor Advisory
http://secunia.com/advisories/21088	[email protected]	Vendor Advisory
http://secunia.com/advisories/21089	[email protected]	Vendor Advisory
https://secure-support.novell.com/KanisaPlatform/Publishing/903/3762108_f.SAL_Public.html	[email protected]
http://www.ben.goulding.com.au/secad.html	[email protected]
http://www.osvdb.org/27349	[email protected]
http://www.securityfocus.com/archive/1/440426/100/0/threaded	[email protected]
http://www.securityfocus.com/bid/19018	[email protected]
http://www.securityfocus.com/bid/19024	[email protected]
http://www.vupen.com/english/advisories/2006/2851	[email protected]	Vendor Advisory
http://www.vupen.com/english/advisories/2006/2852	[email protected]	Vendor Advisory
http://www.vupen.com/english/advisories/2007/0144	[email protected]	Vendor Advisory

see all 22 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-264	Permissions, Privileges, and Access Controls	[email protected]

Affected Products

Product	Versions
agnitum outpost firewall	3.51.759.6511
CPE cpe:2.3:a:agnitum:outpost_firewall:3.51.759.6511:::::::* Remediation No remediation found in references.
lavasoft lavasoft personal firewall	1.0.543.5722.433
CPE cpe:2.3:a:lavasoft:lavasoft_personal_firewall:1.0.543.5722.433:::::::* Remediation No remediation found in references.
novell client firewall	2.0
CPE cpe:2.3:a:novell:client_firewall:2.0:::::::* Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 16, 2026		[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Oct 18, 2018	CVE Modified	[email protected]
Jul 24, 2006	Initial Analysis	[email protected]

CVE-2006-3697 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

Change History

QUICK INFO