Outpost firewall security breached

Exploit defeats self-protection systems.

Security researchers at Matousec, known to VB readers from their , have released details of an exploit taking advantage of a weakness in Agnitum's Outpost firewall product.

The attack exploits a weakness in the self-protection system used by Outpost to prevent tampering with its own files. Full details of the exploit are available online for malicious use, and no patch has yet been made available, as the vendor was informed of the problem at the same time as the public disclosure.

It is believed the flaw affects various versions between 3.0.5 and 4.0.1, and can only be exploited from the local system. The release from Matousec is , with an alert from heise security