337 matches found
CVE-2006-3725
Norton Personal Firewall 2006 9.1.0.33 allows local users to cause a denial of service crash via certain RegSaveKey, RegRestoreKey and RegDeleteKey operations on the 1 HKLM\SYSTEM\CurrentControlSet\Services\SNDSrvc and 2 HKLM\SYSTEM\CurrentControlSet\Services\SymEvent registry keys...
CVE-2006-3787: Undefined Security Weakness
kpf4ss.exe in Sunbelt Kerio Personal Firewall 4.3.x before 4.3.268 does not properly hook the CreateRemoteThread API function, which allows local users to cause a denial of service crash and bypass protection mechanisms by calling CreateRemoteThread...
CVE-2006-3725
Norton Personal Firewall 2006 9.1.0.33 allows local users to cause a denial of service crash via certain RegSaveKey, RegRestoreKey and RegDeleteKey operations on the 1 HKLM\SYSTEM\CurrentControlSet\Services\SNDSrvc and 2 HKLM\SYSTEM\CurrentControlSet\Services\SymEvent registry keys...
CVE-2006-3725
Norton Personal Firewall 2006 9.1.0.33 allows local users to cause a denial of service (crash) by performing certain RegSaveKey, RegRestoreKey, and RegDeleteKey operations on the registry keys HKLM\SYSTEM\CurrentControlSet\Services\SNDSrvc and HKLM\SYSTEM\CurrentControlSet\Services\SymEvent. This...
CVE-2006-3725: Undefined Security Weakness
Norton Personal Firewall 2006 9.1.0.33 allows local users to cause a denial of service crash via certain RegSaveKey, RegRestoreKey and RegDeleteKey operations on the 1 HKLM\SYSTEM\CurrentControlSet\Services\SNDSrvc and 2 HKLM\SYSTEM\CurrentControlSet\Services\SymEvent registry keys...
CVE-2006-3697: Undefined Security Weakness
Agnitum Outpost Firewall Pro 3.51.759.6511 462, as used in 1 Lavasoft Personal Firewall 1.0.543.5722 433 and 2 Novell BorderManager Novell Client Firewall 2.0, does not properly restrict user activities in application windows that run in a LocalSystem context, which allows local users to gain...
Sunbelt Kerio Personal Firewall 4.3.426 - CreateRemoteThread Denial of Service
Sunbelt Kerio Personal Firewall 4.3.426 - CreateRemoteThread Denial of Service source: https://www.securityfocus.com/bid/18996/info Sunbelt Kerio Personal Firewall is prone to a denial-of-service vulnerability. This issue can occur when a program calls the 'CreateRemoteThread' Windows API call...
Sunbelt Kerio Personal Firewall 4.3.426 - CreateRemoteThread Denial of Service
source: https://www.securityfocus.com/bid/18996/info Sunbelt Kerio Personal Firewall is prone to a denial-of-service vulnerability. This issue can occur when a program calls the 'CreateRemoteThread' Windows API call. Exploitation of this vulnerability could cause the firewall application to crash...
CVE-2006-3551: Undefined Security Weakness
NCP Secure Enterprise Client aka VPN/PKI client 8.30 Build 59, and possibly earlier versions, when the Link Firewall and Personal Firewall are both configured to block all inbound and outbound network traffic, allows context-dependent attackers to send inbound UDP traffic with source port 67 and...
Kerio Personal Firewall <= 2.1.4 Remote Authentication Packet Overflow
No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...
Kerio Personal Firewall 2.1.4 - Remote Authentication Packet Overflow (Metasploit)
Kerio Personal Firewall 2.1.4 - Remote Authentication Packet Overflow Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same licens...
VPNcheckpoint.txt
Situation: Employees should be allowed to access your company network from remote by VPN. You want to make sure, that only the hardware of your own company is allowed to access the network on the VPN. This because your company hardware uses a hardened operating system personal firewall,...
CVE-2002-2161
Kerio Personal Firewall (KPF) 2.1.4 and earlier is affected by a denial-of-service vulnerability where remote attackers can trigger a SYN packet flood, causing the firewall to hang and consume CPU. The description available specifies the impact but does not provide deeper root-cause details, affe...
CVE-2002-2161
Kerio Personal Firewall KPF 2.1.4 and earlier allows remote attackers to cause a denial of service hang and CPU consumption via a SYN packet flood...
CVE-2002-2161: Undefined Security Weakness
Kerio Personal Firewall KPF 2.1.4 and earlier allows remote attackers to cause a denial of service hang and CPU consumption via a SYN packet flood...
Kerio Personal Firewall Buffer Overflow
Kerio Personal Firewall is vulnerable to a buffer overflow on the administration port. SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Kerio Personal Firewall Admin Service
The remote host appears to be running the Kerio Personal Firewall Admin service on this port. It is recommended that this port is not reachable from the outside. Also, make sure that the use of this software is done in accordance with your corporate security policy. SPDX-FileCopyrightText: 2005...
CVE-2005-3286
The FWDRV driver in Kerio Personal Firewall 4.2 and Server Firewall 1.1.1 allows local users to cause a denial of service crash by setting the PAGENOACCESS or PAGEGUARD protection on the Page Environment Block PEB, which triggers an exception, aka the "PEB lockout vulnerability."...
CVE-2005-3286
The CVE-2005-3286 entry affects Kerio Personal Firewall 4.2 and Kerio Server Firewall 1.1.1, where the FWDRV driver allows local attackers to trigger a denial of service (crash) by manipulating the Page Environment Block (PEB) protection to PAGE_NOACCESS or PAGE_GUARD, causing an exception (the s...
CVE-2005-3286
The FWDRV driver in Kerio Personal Firewall 4.2 and Server Firewall 1.1.1 allows local users to cause a denial of service crash by setting the PAGENOACCESS or PAGEGUARD protection on the Page Environment Block PEB, which triggers an exception, aka the "PEB lockout vulnerability."...