CVE-2004-1658: Medium severity Kerio Personal Firewall vulnerability
Kerio Personal Firewall 4.0 (KPF4) allows local users with administrative privileges to bypass the Application Security feature and execute arbitrary processes by directly writing to \device\physicalmemory to restore the running kernel's SDT ServiceTable.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1658?
CVE-2004-1658 has a high severity rating due to the ability of local users with administrative privileges to bypass security features.
How do I fix CVE-2004-1658?
To fix CVE-2004-1658, update Kerio Personal Firewall to the latest version available.
What does CVE-2004-1658 affect?
CVE-2004-1658 affects multiple versions of Kerio Personal Firewall including 4.0.6, 4.0.7, 4.0.8, 4.0.9, 4.0.10, and 4.0.16.
What are the consequences of CVE-2004-1658?
CVE-2004-1658 can allow local users to execute arbitrary processes, compromising the integrity of the system.
Who can exploit CVE-2004-1658?
Only local users with administrative privileges can exploit CVE-2004-1658.