CVE-2005-0964: Medium severity Kerio Personal Firewall vulnerability

Published Apr 3, 2005

Updated

Unknown vulnerability in Kerio Personal Firewall 4.1.2 and earlier allows local users to bypass firewall rules via a malicious process that impersonates a legitimate process that has fewer restrictions.

Affected Software

9 affected components

Kerio Personal Firewall=4.1

Kerio Personal Firewall=4.1.1

Kerio Personal Firewall=4.0.8

Kerio Personal Firewall=4.0.7

Kerio Personal Firewall=4.0.16

Kerio Personal Firewall=4.0.10

Kerio Personal Firewall=4.1.2

Kerio Personal Firewall=4.0.6

Kerio Personal Firewall=4.0.9

Remediation

Patch Available

http://www.securityfocus.com/bid/12946

Event History

Apr 3, 2005

CVE Published

via MITRE·09:00 AM

Data Sourced

via MITRE·09:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-0964?

CVE-2005-0964 is classified as a medium severity vulnerability due to its ability to allow local users to bypass firewall rules.

How can I mitigate CVE-2005-0964?

To mitigate CVE-2005-0964, upgrade to a patched version of Kerio Personal Firewall that addresses this vulnerability.

Which versions of Kerio Personal Firewall are affected by CVE-2005-0964?

CVE-2005-0964 affects Kerio Personal Firewall versions 4.1.2 and earlier.

What types of attacks does CVE-2005-0964 allow?

CVE-2005-0964 allows local users to execute a malicious process that impersonates a legitimate process, thus bypassing the firewall rules.

Is CVE-2005-0964 specific to certain operating systems?

CVE-2005-0964 is specific to the Kerio Personal Firewall, which runs on various operating systems but is primarily associated with Windows environments.