CVE-2007-0081

Sunbelt Kerio Personal Firewall SKPF 4.3.268 and 4.3.246, and possibly other versions allows local users to provide a Trojan horse iphlpapi.dll to SKPF by placing it in the installation directory...

CVE-2007-0081

Sunbelt Kerio Personal Firewall (SKPF) 4.3.268 and 4.3.246 (and possibly other versions) is affected by CVE-2007-0081, where local users can place a Trojan horse iphlpapi.dll in the installation directory to compromise the product. The NVD CVSS2 base score is 6.8 (MEDIUM) with high impact on conf...

Kerio Personal Firewall IPHLPAPI.DLL本地权限提升漏洞

Kerio Personal Firewall是一款流行的个人防火墙应用程序。 Kerio Personal Firewall装载文件存在问题，本地攻击者可以利用漏洞提升特权。 系统库iphlpapi.dll安装在系统目录中，需要此DLL的SKPF服务先尝试在安装目录中查找iphlpapi.dll，如果在此目录没有找到，会尝试在系统目录中找，如果攻击者在SKPF中的安装目录中建立恶意的iphlpapi.dll文件，在SKPF服务初始化时被操作系统装载到SKPF服务中，导致恶意代码在SKPF服务中执行。 Sunbelt Software Kerio Personal Firewall...

Kerio可注入伪造iphlpapi DLL漏洞

Kerio Personal Firewall是一款个人桌面系统防火墙。 Kerio Personal Firewall处理程序相关组件的加载时存在漏洞，本地攻击者可能利用此漏洞提升权限或使防火墙失效。 Kerio Personal Firewall在加载相关的库文件iphlpapi.dll时，首先从软件的安装目录搜索，如果搜索不到才从操作系统目录加载，而且软件的安装目录是可写的，本地攻击者可以创建伪造的DLL文件，防火墙服务在初始化时加载执行其中的代码，导致执行攻击者的任意指令。 Kerio Personal Firewall 4.3.268 Kerio Personal Firewa...

Kerio Winroute Firewall 5.10 users credentials leak

Application: Kerio Winroute Firewall 5.10 Vendor: Kerio Technologies Inc. Vendor Site: http://www.kerio.com Remote: Yes Exploitable: Yes Risk level: Critical if proxy requires authentication Authors: Alexander Antipov & 3APA3A aka Pig Killer Authors Sites: http://www.securitylab.ru...

Kerio Personal Firewall 4.3 - 'IPHLPAPI.dll' Local Privilege Escalation

source: https://www.securityfocus.com/bid/21828/info Kerio Personal Firewall is prone to a local privilege-escalation vulnerability. A local attacker could exploit this issue to execute arbitrary machine code with SYSTEM-level privileges. A successful exploit could result in the complete compromi...

Kerio Personal Firewall 4.3 - IPHLPAPI.dll Local Privilege Escalation

Kerio Personal Firewall 4.3 - IPHLPAPI.dll Local Privilege Escalation source: https://www.securityfocus.com/bid/21828/info Kerio Personal Firewall is prone to a local privilege-escalation vulnerability. A local attacker could exploit this issue to execute arbitrary machine code with SYSTEM-level...

Kerio Mail Server DoS

Server crash on LDAP queries processing...

Kerio MailServer < 6.3.1 remote Denial of Service

Hi, Kerio MailServer 6.3.1 changelog mentions the following bug fix: 'Fixed possible service stop when handling certain LDAP query' It turns out that vdkms6 vulnerability which is a part of VulnDisco since Oct, 2006 has been fixed. Below is a simple proof of concept code for this bug: !/usr/bin/e...

Kerio MailServer < 6.3.1 Long LDAP Query DoS

The remote host is running Kerio MailServer, a commercial mail server available for Windows, Linux, and Mac OS X platforms. According to its banner, the LDAP service associated with the installed version of Kerio MailServer terminates abnormally when it receives certain malformed LDAP search...

kms1.py.txt

Hi, Kerio MailServer 6.3.1 changelog mentions the following bug fix: 'Fixed possible service stop when handling certain LDAP query' It turns out that vdkms6 vulnerability which is a part of VulnDisco since Oct, 2006 has been fixed. Below is a simple proof of concept code for this bug: !/usr/bin/e...

CVE-2006-6554

Unspecified vulnerability in Kerio MailServer before 6.3.1 allows remote attackers to cause a denial of service segmentation fault and service stop via certain long LDAP queries, as demonstrated by vdkms6.pm...

CVE-2006-6554

CVE-2006-6554 affects Kerio MailServer prior to 6.3.1. The issue is a denial-of-service: remote attackers can trigger a segmentation fault and service stoppage by sending certain long LDAP search queries (as demonstrated by vd_kms6.pm). What is affected: Kerio MailServer’s LDAP handling component...

CVE-2006-6554

Unspecified vulnerability in Kerio MailServer before 6.3.1 allows remote attackers to cause a denial of service segmentation fault and service stop via certain long LDAP queries, as demonstrated by vdkms6.pm...

Kerio MailServer 6.2.2 preauth Remote Denial of Service PoC

Exploit for linux platform in category dos / poc =========================================================== Kerio MailServer 6.2.2 preauth Remote Denial of Service PoC =========================================================== !/usr/bin/env python kms1.py - Kerio MailServer 6.2.2 preauth remote...

Kerio MailServer 6.2.2 - Remote Denial of Service (PoC)

!/usr/bin/env python kms1.py - Kerio MailServer 6.2.2 preauth remote DoS fixed in Kerio MailServer 6.3.1 Copyright c 2006 Evgeny Legerov Permission to use, copy, modify, and distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice an...

Kerio MailServer 6.2.2 preauth Remote Denial of Service PoC

No description provided by source. !/usr/bin/env python kms1.py - Kerio MailServer 6.2.2 preauth remote DoS fixed in Kerio MailServer 6.3.1 Copyright c 2006 Evgeny Legerov Permission to use, copy, modify, and distribute this software for any purpose with or without fee is hereby granted, provided...

Kerio MailServer 6.2.2 - Remote Denial of Service (PoC)

Kerio MailServer 6.2.2 - Remote Denial of Service PoC !/usr/bin/env python kms1.py - Kerio MailServer 6.2.2 preauth remote DoS fixed in Kerio MailServer 6.3.1 Copyright c 2006 Evgeny Legerov Permission to use, copy, modify, and distribute this software for any purpose with or without fee is hereb...

CVE-2006-6131

Untrusted search path vulnerability in 1 WSAdminServer and 2 WSWebServer in Kerio WebSTAR 4D WebSTAR Server Suite 5.4.2 and earlier allows local users with webstar privileges to gain root privileges via a malicious libucache.dylib helper library in the current working directory...

CVE-2006-6131

CVE-2006-6131 describes an untrusted search path vulnerability in Kerio WebSTAR (4D WebSTAR Server Suite) 5.4.2 and earlier. The affected components are WSAdminServer and WSWebServer. Local users with webstar privileges can gain root privileges by placing a malicious libucache.dylib in the curren...