CVE-2003-0220: Buffer Overflow
Published Apr 29, 2003
·Updated
Buffer overflow in the administrator authentication process for Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to execute arbitrary code via a handshake packet.
Affected Software
5 affected components
Kerio Personal Firewall 2=2.1
Kerio Personal Firewall 2=2.1.1
Kerio Personal Firewall 2=2.1.2
Kerio Personal Firewall 2=2.1.3
Kerio Personal Firewall 2=2.1.4
Remediation
Event History
Apr 29, 2003
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
May 12, 2003
Data Sourced
via NVD·04:00 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2003-0220?
CVE-2003-0220 is considered a critical vulnerability due to its ability to allow remote code execution.
2
How do I fix CVE-2003-0220?
To fix CVE-2003-0220, upgrade Kerio Personal Firewall to version 2.1.5 or later.
3
What systems are affected by CVE-2003-0220?
CVE-2003-0220 affects Kerio Personal Firewall versions 2.1 through 2.1.4.
4
What is the nature of the vulnerability in CVE-2003-0220?
CVE-2003-0220 is a buffer overflow vulnerability that can be triggered during the administrator authentication process.
5
Can CVE-2003-0220 be exploited remotely?
Yes, CVE-2003-0220 can be exploited remotely by sending a specially crafted handshake packet.