CVE:CVE-2006-3697
CNNVD:CNNVD-200607-289
(1) Lavasoft Personal Firewall 1.0.543.5722 (433)和(2) Novell BorderManager Novell Client Firewall 2.0使用的Agnitum Outpost Firewall Pro 3.51.759.6511(462)未正确限制在LocalSystem环境中运行的应用程序窗口中的用户活动。本地用户可以(a)借助没有explorer.exe运行的情形时，可能与ShellExecute API 函数有关的"open folder"选项，或(b)通过"Save Configuration As"选项重写批处理文件，以获得特权并执行命令。 注: 这可能是Microsoft Windows和explorer.exe的漏洞，而不是防火墙的漏洞。
solution:Upgrade agnitum outpost_firewall to a higher version than 3.51.759.6511,and avoid the version 3.51.759.6511; Upgrade lavasoft lavasoft_personal_firewall to a higher version than 1.0.543.5722.433,and avoid the version 1.0.543.5722.433; Upgrade novell client_firewall to a higher version than 2.0,and avoid the version 2.0