FKIE_CVE-2009-2450

Vulnerability from fkie_nvd - Published: 2009-07-13 17:30 - Updated: 2026-04-23 00:35
Severity
Summary
The OAmon.sys kernel driver 3.1.0.0 and earlier in Tall Emu Online Armor Personal Firewall AV+ before 3.5.0.12, and Personal Firewall 3.5 before 3.5.0.14, allows local users to gain privileges via crafted METHOD_NEITHER IOCTL requests to \Device\OAmon containing arbitrary kernel addresses, as demonstrated using the 0x830020C3 IOCTL.
References
cve@mitre.orghttp://milw0rm.com/sploits/2009-OAmon_Exp.zipExploit
cve@mitre.orghttp://www.exploit-db.com/exploits/8875
cve@mitre.orghttp://www.ntinternals.org/ntiadv0806/ntiadv0806.html
cve@mitre.orghttp://www.securityfocus.com/bid/35227Exploit
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/50960
af854a3a-2127-422b-91ae-364da2661108http://milw0rm.com/sploits/2009-OAmon_Exp.zipExploit
af854a3a-2127-422b-91ae-364da2661108http://www.exploit-db.com/exploits/8875
af854a3a-2127-422b-91ae-364da2661108http://www.ntinternals.org/ntiadv0806/ntiadv0806.html
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/35227Exploit
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/50960
Impacted products
Vendor Product Version
tallemu online_armor_personal_firewall_av\+ *
tallemu online_armor_personal_firewall_av\+ 3.5.0.6
tallemu online_armor_personal_firewall_av\+ 3.5.0.9
tallemu personal_firewall *
tallemu personal_firewall 3.5.0.1
tallemu personal_firewall 3.5.0.2
tallemu personal_firewall 3.5.0.3
tallemu personal_firewall 3.5.0.4
tallemu personal_firewall 3.5.0.5
tallemu personal_firewall 3.5.0.6
tallemu personal_firewall 3.5.0.7
tallemu personal_firewall 3.5.0.8
tallemu personal_firewall 3.5.0.9
tallemu personal_firewall 3.5.0.10
tallemu personal_firewall 3.5.0.11
tallemu personal_firewall 3.5.0.12
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:tallemu:online_armor_personal_firewall_av\\+:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "3AD4AE7A-E4CB-42C1-A11A-FC6D508F147A",
              "versionEndIncluding": "3.5.0.11",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tallemu:online_armor_personal_firewall_av\\+:3.5.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "5E8DADE9-DBA9-44C9-8DC1-940804060CF7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tallemu:online_armor_personal_firewall_av\\+:3.5.0.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "A3C63A08-EDE7-4CC6-A23D-07CEB0805CB2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tallemu:personal_firewall:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D305E959-469D-42E0-83C1-AD73A94C647F",
              "versionEndIncluding": "3.5.0.13",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tallemu:personal_firewall:3.5.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "77A31AE5-6BDD-444C-A10C-E84F32EFE4E3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tallemu:personal_firewall:3.5.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "61A9DD13-00EE-4DCA-819A-EE4BC4E0F306",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tallemu:personal_firewall:3.5.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "A4BD2C55-AEA8-4700-89F5-2A9BEA2DA37F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tallemu:personal_firewall:3.5.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "A514514E-F2BA-4B23-820C-7AA6B284042B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tallemu:personal_firewall:3.5.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "81A19ED6-9DF9-49B6-88E2-B2BE30FBDF17",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tallemu:personal_firewall:3.5.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "3658D72E-413B-489E-9D4C-262B15160D30",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tallemu:personal_firewall:3.5.0.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "6BDC5F53-D51F-4801-87BE-EE253DB80D63",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tallemu:personal_firewall:3.5.0.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "F2123F5D-A418-4657-816D-D97BF6A1ADDA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tallemu:personal_firewall:3.5.0.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "A3665144-A936-4EFA-BB97-E3436B5BFD7A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tallemu:personal_firewall:3.5.0.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "8DA3E5BB-5BBE-4565-9417-34B3BDA08349",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tallemu:personal_firewall:3.5.0.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "882FC0D5-B40E-4F5C-8999-03C10E8624B3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tallemu:personal_firewall:3.5.0.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "862734C7-284F-43F3-9658-F6604FAD5746",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The OAmon.sys kernel driver 3.1.0.0 and earlier in Tall Emu Online Armor Personal Firewall AV+ before 3.5.0.12, and Personal Firewall 3.5 before 3.5.0.14, allows local users to gain privileges via crafted METHOD_NEITHER IOCTL requests to \\Device\\OAmon containing arbitrary kernel addresses, as demonstrated using the 0x830020C3 IOCTL."
    },
    {
      "lang": "es",
      "value": "El controlador del kernel OAmon.sys v 3.1.0.0 y anteriores en Tall Emu Online Armor Personal Firewall AV+ anterior a v3.5.0.12, y Personal Firewall 3.5 anterior a v3.5.0.14, permite a usuarios locales obtener privilegios a trav\u00e9s de peticiones METHOD_NEITHER IOCTL modificadas a  \\Device\\OAmon que contienen direcciones del kernel de su elecci\u00f3n como se ha demostrado empleadon el IOCTL 0x830020C3."
    }
  ],
  "id": "CVE-2009-2450",
  "lastModified": "2026-04-23T00:35:47.467",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 7.2,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 10.0,
        "obtainAllPrivilege": true,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2009-07-13T17:30:00.343",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://milw0rm.com/sploits/2009-OAmon_Exp.zip"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.exploit-db.com/exploits/8875"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.ntinternals.org/ntiadv0806/ntiadv0806.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/35227"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50960"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://milw0rm.com/sploits/2009-OAmon_Exp.zip"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.exploit-db.com/exploits/8875"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ntinternals.org/ntiadv0806/ntiadv0806.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/35227"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50960"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.