Secunia

Chew Keong TAN has reported a vulnerability in Sygate Personal Firewall Pro, which can be exploited by malicious, local users to bypass certain security restrictions.

The firewall service ("smc.exe") can reportedly be crashed by an unprivileged application by sending a specially crafted message to the ListView control in the GUI.

Normally, a security mechanism in Sygate Personal Firewall stops network traffic handled by a system in case the firewall service becomes unavailable. However, missing authentication within this mechanism can be exploited by a malicious program to disable the protection by passing specially crafted control codes to the kernel-space NDIS intermediate driver ("teefer.sys").

The vulnerability has been reported in version 5.5 Build 2525. Other versions may also be affected.

Solution
The vulnerability will reportedly be fixed in an upcoming release.
Further details available in Customer Area

Provided and/or discovered by
Chew Keong TAN

Deep Links
Links available in Customer Area