CVE-2006-3697

CVE-2006-3697 describes a local privilege escalation vulnerability affecting Agnitum Outpost Firewall Pro 3.51.759.6511, Lavasoft Personal Firewall 1.0.543.5722, and Novell BorderManager Novell Client Firewall 2.0. The flaw allows local users to gain elevated privileges and execute commands by exploiting improper restrictions in application windows running in a LocalSystem context. This can occur either through the "open folder" option when explorer.exe is not running, or by overwriting a batch file via the "Save Configuration As" option. The vulnerability has a CVSS score of 7.2 (High), indicating a local attack vector with low attack complexity and complete impact on confidentiality, integrity, and availability. While the initial report suggests the firewall as the source, it notes the possibility of the vulnerability residing in Microsoft Windows and explorer.exe. There is no evidence of active exploitation, publicly available exploit code in Metasploit, Nuclei, or ExploitDB, nor significant community discussion or media coverage surrounding this CVE. It is not listed in the CISA Known Exploited Vulnerabilities Catalog.