CVE-2003-1491

CVE-2003-1491 affects Kerio Personal Firewall 2.1.4, where a default DNS (UDP 53) inbound rule permits packets from source port 53, enabling remote bypass of firewall filters. This is a network-accessible bypass vulnerability; exploitation details are provided in multiple sources (NVD/NIST, CVE l...

CVE-2004-1109

The CVE-2004-1109 entry concerns the FWDRV.SYS driver in Kerio Personal Firewall 4.1.1 and earlier. A crafted TCP, UDP, or ICMP packet with a zero-length IP Option field can trigger an infinite loop, causing CPU consumption and a system freeze (DoS) on vulnerable systems. Affected component: FWDR...

CVE-2004-2329

Kerio Personal Firewall 2.1.5 is vulnerable to local privilege escalation: when loading firewall configuration files, the Load button opens a file dialog without dropping privileges, allowing a local user to execute arbitrary code with SYSTEM privileges. Affected component: firewall configuration...

CVE-2005-1063

Kerio’s CVE-2005-1063 affects Kerio WinRoute Firewall (up to 6.0.10), Kerio Personal Firewall (up to 4.1.2), and Kerio MailServer (up to 6.0.8). The issue arises from abusing the administration protocol, allowing remote attackers to cause a CPU-consuming denial of service by triggering pre-authen...

CVE-2005-1062

Kerio’s administration protocol in Kerio WinRoute Firewall <= 6.0.10, Kerio Personal Firewall <= 4.1.2, and Kerio MailServer

CVE-2006-5153

The CVE concerns Sunbelt Kerio Personal Firewall 4.3.268 and earlier, where two drivers, fwdrv.sys and khips.sys, fail to validate arguments passed to SSDT functions (NtCreateFile, NtDeleteFile, NtLoadDriver, NtMapViewOfSection, NtOpenFile, NtSetInformationFile). This lack of validation allows lo...

CVE-2002-2161

Kerio Personal Firewall (KPF) 2.1.4 and earlier is affected by a denial-of-service vulnerability where remote attackers can trigger a SYN packet flood, causing the firewall to hang and consume CPU. The description available specifies the impact but does not provide deeper root-cause details, affe...

CVE-2004-1658

Kerio Personal Firewall 4.0 (KPF4) is affected by a local privilege escalation that allows a user with administrative rights to bypass the Application Security feature and execute arbitrary code by writing directly to \device\physicalmemory, restoring the kernel SDT ServiceTable. The vulnerabilit...

CVE-2005-3286

The CVE-2005-3286 entry affects Kerio Personal Firewall 4.2 and Kerio Server Firewall 1.1.1, where the FWDRV driver allows local attackers to trigger a denial of service (crash) by manipulating the Page Environment Block (PEB) protection to PAGE_NOACCESS or PAGE_GUARD, causing an exception (the s...

CVE-2005-0964

Kerio Personal Firewall 4.1.2 and earlier has a local bypass vulnerability where a malicious process impersonates a legitimate, less-restricted process to bypass firewall rules. This can allow local users to circumvent protections. The CVE entry notes a MEDIUM impact (base score 4.6); no specific...

CVE-2006-3787

The CVE-2006-3787 issue affects Sunbelt Kerio Personal Firewall 4.3.x prior to 4.3.268 where kpf4ss.exe does not properly hook CreateRemoteThread. This allows a local user to trigger a crash (denial of service) and bypass protection mechanisms by calling CreateRemoteThread. The vulnerability is d...