vendor:
Kerio Personal Firewall
by:
y0 [at] w00t-shell.net
7.5
CVSS
HIGH
Buffer Overflow
120
CWE
Product Name: Kerio Personal Firewall
Affected Version From: 2.1.2004
Affected Version To: 2.1.2004
Patch Exists: YES
Related CWE: 2003-0220
CPE: a:kerio:kerio_personal_firewall:2.1.4
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows, Linux, Mac
2003
Kerio Personal Firewall 2 (2.1.4) Remote Authentication Packet Buffer Overflow
This module exploits a stack overflow in Kerio Personal Firewall administration authentication process. This module has only been tested against Kerio Personal Firewall 2 2.1.4.
Mitigation:
Upgrade to the latest version of Kerio Personal Firewall