CORE-2003-0305-02: Vulnerabilities in Kerio Personal Firewall

Core Security Technologies Advisory http://www.coresecurity.com Vulnerabilities in Kerio Personal Firewall Date Published: 2003-04-28 Last Update: 2003-04-28 Advisory ID: CORE-2003-0305-02 Bugtraq ID: 7179, 7180 CVE Name: None currently assigned Title: Kerio Personal Firewall Replay Attack and...

Kerio personal firewall multiple bugs

It's possible to fool ip filtering by using UDP/53 as a source port. Buffer overflow during authentication. Replay attacks during authentication...

Kerio Personal Firewall 2.1.x - Remote Authentication Packet Buffer Overflow (1)

source: https://www.securityfocus.com/bid/7180/info A buffer-overflow vulnerability has been discovered in Kerio Personal Firewall. The problem occurs during the administration authentication process. An attacker could exploit this vulnerability by forging a malicious packet containing an excessi...

Kerio Personal Firewall 2.1.x - Remote Authentication Packet Buffer Overflow (1)

Kerio Personal Firewall 2.1.x - Remote Authentication Packet Buffer Overflow 1 source: https://www.securityfocus.com/bid/7180/info A buffer-overflow vulnerability has been discovered in Kerio Personal Firewall. The problem occurs during the administration authentication process. An attacker could...

CVE-2002-0685

CVE-2002-0685 describes a heap-based buffer overflow in the message decoding function of the PGP Outlook Plug-in used by NAI PGP Desktop Security 7.0.4, Personal Security 7.0.3, and Freeware 7.0.3. A remote attacker could trigger this via a large, malformed email message to modify the heap and ga...

CVE-2002-1544

Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers to read or modify arbitrary files via .. dot dot sequences in the commands 1 LIST ls, 2 mkdir, 3 put, or 4 get...

CVE-2002-1545

CooolSoft Personal FTP Server 2.24 allows remote attackers to obtain the absolute pathname of the FTP root via a PWD command, which includes the full path in the response...

Personal FTP Server buffer overflow

Buffer overflow on USER longer than 320 characters...

Personal FTP Server

--------------------------------------- Product : Personal FTP Server Version : ? OSystem : Windows Authors : CoolSoft WebSite : http://www.cooolsoft.com Problem : Buffer Overflow in field USER --------------------------------------- Description: ------------ rus: ==== Переполнение буфера...

Security Advisory - MyTaxexpress 2003

Original Advisory: Tuesday, March 25, 2003 Severity: Medium - High Description: Unencrypted tax-return information saved in C:My Documents by default can pose security risks, and may disclose financial/personal information to the Internet via peer-to-peer P2P networks. Version: Tested on the...

CVE-2002-1545

CooolSoft Personal FTP Server 2.24 is affected by a vulnerability where a remote attacker can trigger a PWD command to obtain the absolute pathname of the FTP root, exposing the full filesystem path in the response. This is the explicit impact described in CVE-2002-1545. The available documents d...

CVE-2002-1544

CVE-2002-1544 affects CooolSoft Personal FTP Server 2.24. It is a directory traversal vulnerability allowing remote attackers to read or modify arbitrary files by using .. sequences in LIST, mkdir, put, or get commands. The root cause is improper normalization of path input enabling access outsid...

Sygate Security Bulletin ID SS20030129-0002

Sygate Security Bulletin Sygate was made aware of an exposure in Sygate Personal Firewall 5.0 and Sygate Security Agent 3.0 on 1/23/2003 by David Fernandez Madrid [email protected]. Sygate Security Bulletin ID ---------------------------- SS20030129-0002 Description ------------ The reporter ...

Sygate personal firewall protection bypass

It's possible to access any listening UDP port...

CVE-2002-2397

Sygate personal firewall 5.0 could allow remote attackers to bypass firewall filters via spoofed 1 source IP address of 127.0.0.1 or 2 network address of 127.0.0.0...

CVE-2002-1778

Symantec Norton Personal Firewall 2002 allows remote attackers to bypass the portscan protection by using a 1 SYN/FIN, 2 SYN/FIN/URG, 3 SYN/FIN/PUSH, or 4 SYN/FIN/URG/PUSH scan...

CVE-2002-2336

Norton Personal Firewall 2002 4.0, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets...

CVE-2002-2161

Kerio Personal Firewall KPF 2.1.4 and earlier allows remote attackers to cause a denial of service hang and CPU consumption via a SYN packet flood...

CVE-2002-1683

Cross-site scripting XSS vulnerability in BadBlue Personal Edition 1.7.3 allows remote attackers to execute arbitrary script as other users by injecting script into the cleanSearchString function...

CVE-2002-1779

The "block fragmented IP Packets" option in Symantec Norton Personal Firewall 2002 NPW does not properly protect against certain attacks on Windows vulnerabilities such as jolt2 CVE-2000-0305...