CVE Vulnerabilities

CVE-2004-1658

Published: Sep 02, 2004 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Kerio Personal Firewall 4.0 (KPF4) allows local users with administrative privileges to bypass the Application Security feature and execute arbitrary processes by directly writing to devicephysicalmemory to restore the running kernels SDT ServiceTable.

Affected Software

Name Vendor Start Version End Version
Personal_firewall Kerio 4.0.6 (including) 4.0.6 (including)
Personal_firewall Kerio 4.0.7 (including) 4.0.7 (including)
Personal_firewall Kerio 4.0.8 (including) 4.0.8 (including)
Personal_firewall Kerio 4.0.9 (including) 4.0.9 (including)
Personal_firewall Kerio 4.0.10 (including) 4.0.10 (including)
Personal_firewall Kerio 4.0.16 (including) 4.0.16 (including)

References