CVE-2004-2329: High severity Kerio Personal Firewall vulnerability
Published Dec 31, 2004
·Updated
Kerio Personal Firewall (KPF) 2.1.5 allows local users to execute arbitrary code with SYSTEM privileges via the Load button in the Firewall Configuration Files option, which does not drop privileges before opening the file loading dialog box.
Affected Software
1 affected component
Kerio Personal Firewall=2.1.5
Event History
Dec 31, 2004
CVE Published
05:00 AM
Aug 16, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2329?
CVE-2004-2329 is classified as a high severity vulnerability due to its potential to allow local users to execute arbitrary code with SYSTEM privileges.
2
How do I fix CVE-2004-2329?
To fix CVE-2004-2329, upgrade to a version of Kerio Personal Firewall that corrects this security flaw.
3
Who is affected by CVE-2004-2329?
CVE-2004-2329 affects users of Kerio Personal Firewall version 2.1.5.
4
What type of vulnerability is CVE-2004-2329?
CVE-2004-2329 is a local privilege escalation vulnerability.
5
Can CVE-2004-2329 be exploited remotely?
No, CVE-2004-2329 can only be exploited by a local user on the affected system.