high7.5Public exploit code
CVE-2003-0220
Buffer overflow in the administrator authentication process for Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to execute arbitrary co…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Kerio Personal Firewall 2.1.x - Remote Authentication Packet Buffer Overflow (2)2003-04-30 · remote · windows · Verified
- Kerio Personal Firewall 2.1.x - Remote Authentication Packet Buffer Overflow (1)2003-04-28 · dos · windows · Verified
- Kerio Personal Firewall 2.1.4 - Authentication Packet Overflow (Metasploit)2010-06-15 · remote · windows · Verified
- Kerio Personal Firewall 2.1.4 - Remote Authentication Packet Overflow (Metasploit)2006-02-28 · remote · windows · Verified
- Kerio Personal Firewall 2.1.4 - Remote Code Execution2003-05-08 · remote · windows · Verified
Impact
Buffer overflow in the administrator authentication process for Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to execute arbitrary code via a handshake packet.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kerio | Personal Firewall 2 | Versions 2.1, 2.1.1, 2.1.2, 2.1.3, 2.1.4 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=105155734411836&w=2
- http://www.coresecurity.com/common/showdoc.php?idx=314&idxseccion=10
- http://www.kb.cert.org/vuls/id/454716
- http://www.securityfocus.com/bid/7180
- http://marc.info/?l=bugtraq&m=105155734411836&w=2
- http://www.coresecurity.com/common/showdoc.php?idx=314&idxseccion=10
- http://www.kb.cert.org/vuls/id/454716
- http://www.securityfocus.com/bid/7180