VulnerabilityModified
CVE-2004-1658
Kerio Personal Firewall 4.0 (KPF4) allows local users with administrative privileges to bypass the Application Security feature and execute arbitrary processes by directly writing to \device\physicalmemory to restore the running kernel's SDT ServiceTable.
MEDIUM 4.6EPSS 0.92%
Does this matter?
Lower severity and a low EPSS score (0.92%). Track it; it rarely justifies an emergency change on its own.
Description
Kerio Personal Firewall 4.0 (KPF4) allows local users with administrative privileges to bypass the Application Security feature and execute arbitrary processes by directly writing to \device\physicalmemory to restore the running kernel's SDT ServiceTable.
- CVSS 2.0
- 4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 0.92% probability · 58th percentile
- CISA KEV
- Not listed
- Affected
- kerio/personal firewall
- Source
- cve@mitre.org
References
- http://marc.info/?l=bugtraq&m=109420310631039&w=2
- http://secunia.com/advisories/12468/Vendor Advisory
- http://www.security.org.sg/vuln/kerio4016.htmlVendor Advisory
- http://www.securityfocus.com/bid/11096Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17270
- http://marc.info/?l=bugtraq&m=109420310631039&w=2
- http://secunia.com/advisories/12468/Vendor Advisory
- http://www.security.org.sg/vuln/kerio4016.htmlVendor Advisory
- http://www.securityfocus.com/bid/11096Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17270
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.