medium4.6
CVE-2004-1658
Kerio Personal Firewall 4.0 (KPF4) allows local users with administrative privileges to bypass the Application Security feature and execute arbitrary processes…
Impact
Kerio Personal Firewall 4.0 (KPF4) allows local users with administrative privileges to bypass the Application Security feature and execute arbitrary processes by directly writing to \device\physicalmemory to restore the running kernel's SDT ServiceTable.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kerio | Personal Firewall | Versions 4.0.6, 4.0.7, 4.0.8, 4.0.9, 4.0.10, 4.0.16 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=109420310631039&w=2
- http://secunia.com/advisories/12468/
- http://www.security.org.sg/vuln/kerio4016.html
- http://www.securityfocus.com/bid/11096
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17270
- http://marc.info/?l=bugtraq&m=109420310631039&w=2
- http://secunia.com/advisories/12468/
- http://www.security.org.sg/vuln/kerio4016.html
- http://www.securityfocus.com/bid/11096
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17270