CVE-2006-7160: The Sandbox.sys driver in Outpost Firewall PRO 4.0, and possibly earlier versions, does not validate arguments

Q: How do I fix CVE-2006-7160?

outpost firewall: upgrade to newer than 4.0. Exact commands for each OS are on this page.

Q: Is CVE-2006-7160 being exploited?

CVE-2006-7160 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

Q: What does CVE-2006-7160 affect?

CVE-2006-7160 affects outpost firewall. Severity is medium (CVSS 4.9). The Sandbox.sys driver in Outpost Firewall PRO 4.0, and possibly earlier versions, does not validate arguments to hooked SSDT functions, which allows local users to cause a denial of service (crash) via invalid arguments to the (1) NtAssign

Q: How urgent is CVE-2006-7160?

Priority 25/100. No elevated risk signals yet.

Routine

MEDIUM 4.9UPGRADE

CVE-2006-7160 is a medium-severity flaw (CVSS 4.9) affecting outpost firewall. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

The Sandbox.sys driver in Outpost Firewall PRO 4.0, and possibly earlier versions, does not validate arguments to hooked SSDT functions, which allows local users to cause a denial of service (crash) via invalid arguments to the (1) NtAssignProcessToJobObject,, (2) NtCreateKey, (3) NtCreateThread, (4) NtDeleteFile, (5) NtLoadDriver, (6) NtOpenProcess, (7) NtProtectVirtualMemory, (8) NtReplaceKey, (9) NtTerminateProcess, (10) NtTerminateThread, (11

Why this priority

No elevated risk signals yet

A fixed release or distro patch exists.

Risk facts

CVSS score	4.9 (Medium)
EPSS exploit chance	0.4% (top 69%)
CISA exploited list	No
Weakness	CWE-20
Published	2007-03-07
Last modified	2026-06-16

Publisher (CNA): MITRE · Vendor: agnitum

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2007-03-07 20:19 UTCPublished CVE record published
2026-06-16 22:34 UTCUpdated Record last modified

agnitum outpost firewall UPGRADE

Affected: <= 4.0

Fixed in: newer than 4.0

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy outpost-firewall || rpm -q outpost-firewall || outpost-firewall --version

2. UPGRADE to newer than 4.0 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade outpost-firewall

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade outpost-firewall

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2006-7160?

outpost firewall: upgrade to newer than 4.0. Exact commands for each OS are on this page.

Is CVE-2006-7160 being exploited?

CVE-2006-7160 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2006-7160 affect?

CVE-2006-7160 affects outpost firewall. Severity is medium (CVSS 4.9). The Sandbox.sys driver in Outpost Firewall PRO 4.0, and possibly earlier versions, does not validate arguments to hooked SSDT functions, which allows local users to cause a denial of service (crash) via invalid arguments to the (1) NtAssign

How urgent is CVE-2006-7160?

Priority 25/100. No elevated risk signals yet.

Related CVEs

CVE-2007-5042 MEDIUM 4.6 DOWNGRADE Outpost Firewall Pro 4.0.1025.7828 does not properly validate certain parameters to System Service Descriptor
CVE-2007-3086 MEDIUM 4.9 DOWNGRADE Unrestricted critical resource lock in Agnitum Outpost Firewall PRO 4.0 1007.591.145 and earlier allows local
CVE-2007-0333 HIGH 7.2 DOWNGRADE Agnitum Outpost Firewall PRO 4.0 allows local users to bypass access restrictions and insert Trojan horse driv
CVE-2006-5721 MEDIUM 4.9 DOWNGRADE The \Device\SandBox driver in Outpost Firewall PRO 4.0 (964.582.059) allows local users to cause a denial of s
CVE-2006-3697 HIGH 7.2 DOWNGRADE DOWNGRADE Agnitum Outpost Firewall Pro 3.51.759.6511 (462), as used in (1) Lavasoft Personal Firewall 1.0.543.5722 (433)

References

← Back to latest CVEs