473 matches found
CVE-2006-5420
Kerio WinRoute Firewall 6.2.2 and earlier is affected by a vulnerability that allows remote attackers to cause a denial-of-service (crash) by sending malformed DNS responses. The available documents confirm the affected product and the weak input handling but do not provide details on exploitatio...
CVE-2006-5153
The 1 fwdrv.sys and 2 khips.sys drivers in Sunbelt Kerio Personal Firewall 4.3.268 and earlier do not validate arguments passed through to SSDT functions, including NtCreateFile, NtDeleteFile, NtLoadDriver, NtMapViewOfSection, NtOpenFile, and NtSetInformationFile, which allows local users to caus...
CVE-2006-5153
The CVE concerns Sunbelt Kerio Personal Firewall 4.3.268 and earlier, where two drivers, fwdrv.sys and khips.sys, fail to validate arguments passed to SSDT functions (NtCreateFile, NtDeleteFile, NtLoadDriver, NtMapViewOfSection, NtOpenFile, NtSetInformationFile). This lack of validation allows lo...
Kerio Personal Firewall privilege escalation
Insufficient hooked SSDT calls arguments validation...
Kerio Multiple insufficient argument validation of hooked SSDT function Vulnerability
Hello, I would like to inform you about a vulnerability in Sunbelt Kerio Personal Firewall. Description: Sunbelt Kerio Personal Firewall hooks many functions in SSDT and in at least six cases it fails to validate arguments that come from user mode. User calls to NtCreateFile, NtDeleteFile,...
Kerio Multiple insufficient argument validation of hooked SSDT function Vulnerability
Hello, I would like to inform you about a vulnerability in Sunbelt Kerio Personal Firewall. Description: Sunbelt Kerio Personal Firewall hooks many functions in SSDT and in at least six cases it fails to validate arguments that come from user mode. User calls to NtCreateFile, NtDeleteFile,...
Kerio Firewall 2.1.4 Authentication Packet Overflow
This module exploits a stack buffer overflow in Kerio Personal Firewall administration authentication process. This module has only been tested against Kerio Personal Firewall 2 2.1.4. This module requires Metasploit: https://metasploit.com/download Current source:...
CVE-2006-3787
kpf4ss.exe in Sunbelt Kerio Personal Firewall 4.3.x before 4.3.268 does not properly hook the CreateRemoteThread API function, which allows local users to cause a denial of service crash and bypass protection mechanisms by calling CreateRemoteThread...
CVE-2006-3787
The CVE-2006-3787 issue affects Sunbelt Kerio Personal Firewall 4.3.x prior to 4.3.268 where kpf4ss.exe does not properly hook CreateRemoteThread. This allows a local user to trigger a crash (denial of service) and bypass protection mechanisms by calling CreateRemoteThread. The vulnerability is d...
CVE-2006-3787
kpf4ss.exe in Sunbelt Kerio Personal Firewall 4.3.x before 4.3.268 does not properly hook the CreateRemoteThread API function, which allows local users to cause a denial of service crash and bypass protection mechanisms by calling CreateRemoteThread...
Sunbelt Kerio Personal Firewall 4.3.426 - CreateRemoteThread Denial of Service
Sunbelt Kerio Personal Firewall 4.3.426 - CreateRemoteThread Denial of Service source: https://www.securityfocus.com/bid/18996/info Sunbelt Kerio Personal Firewall is prone to a denial-of-service vulnerability. This issue can occur when a program calls the 'CreateRemoteThread' Windows API call...
Sunbelt Kerio Personal Firewall 4.3.426 - CreateRemoteThread Denial of Service
source: https://www.securityfocus.com/bid/18996/info Sunbelt Kerio Personal Firewall is prone to a denial-of-service vulnerability. This issue can occur when a program calls the 'CreateRemoteThread' Windows API call. Exploitation of this vulnerability could cause the firewall application to crash...
CVE-2006-2267
Kerio WinRoute Firewall before 6.2.1 allows remote attackers to cause a denial of service application crash via unknown vectors in the "email protocol inspectors," possibly 1 SMTP and 2 POP3...
Code injection
Kerio WinRoute Firewall before 6.2.1 allows remote attackers to cause a denial of service application crash via unknown vectors in the "email protocol inspectors," possibly 1 SMTP and 2 POP3...
CVE-2006-2267
Kerio WinRoute Firewall versions prior to 6.2.1 are affected by a denial-of-service vulnerability in the email protocol inspectors, allowing remote attackers to crash the application. The advisory cites unspecified vectors within the inspectors (potentially SMTP or POP3); no concrete exploit deta...
CVE-2006-2267
Kerio WinRoute Firewall before 6.2.1 allows remote attackers to cause a denial of service application crash via unknown vectors in the "email protocol inspectors," possibly 1 SMTP and 2 POP3...
Kerio Winroute Firewall DoS
Crash on scanning POP3 / SMTP messages...
[SA19947] Kerio WinRoute Firewall Protocol Inspection Denial of Service
---------------------------------------------------------------------- Secunia Survey Secunia would like to invite you to participate in an electronic survey evolving the usefulness of our mailing lists. To value your effort Secunia will offer you free access to the Secunia Security Manager for...