Lucene search
HistoryMay 02, 2005 - 4:00 a.m.
CVE-2005-0964
cve-2005-0964
kerio personal firewall
vulnerability
bypass
firewall rules
local users
malicious process
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Unknown vulnerability in Kerio Personal Firewall 4.1.2 and earlier allows local users to bypass firewall rules via a malicious process that impersonates a legitimate process that has fewer restrictions.
Affected configurations
Node
keriopersonal_firewallMatch4.0.6
ORkeriopersonal_firewallMatch4.0.7
ORkeriopersonal_firewallMatch4.0.8
ORkeriopersonal_firewallMatch4.0.9
ORkeriopersonal_firewallMatch4.0.10
ORkeriopersonal_firewallMatch4.0.16
ORkeriopersonal_firewallMatch4.1
ORkeriopersonal_firewallMatch4.1.1
ORkeriopersonal_firewallMatch4.1.2
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2005-0964