CVE-2006-5153
First published: Tue Oct 03 2006(Updated: )
The (1) fwdrv.sys and (2) khips.sys drivers in Sunbelt Kerio Personal Firewall 4.3.268 and earlier do not validate arguments passed through to SSDT functions, including NtCreateFile, NtDeleteFile, NtLoadDriver, NtMapViewOfSection, NtOpenFile, and NtSetInformationFile, which allows local users to cause a denial of service (crash) and possibly other impacts via unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Kerio Personal Firewall | =4.1.0 | |
| Kerio Personal Firewall | =4.0.12 | |
| Kerio Personal Firewall | =4.0.13 | |
| Kerio Personal Firewall | =4.1 | |
| Kerio Personal Firewall | =4.3.246 | |
| Kerio Personal Firewall | =4.2 | |
| Kerio Personal Firewall | =4.0.15 | |
| Kerio Personal Firewall | =4.1.1 | |
| Kerio Personal Firewall | =4.0.8 | |
| Kerio Personal Firewall | =4.0.7 | |
| Kerio Personal Firewall | =4.0.16 | |
| Kerio Personal Firewall | =4.0.10 | |
| Kerio Personal Firewall | =4.3.268 | |
| Kerio Personal Firewall | =4.1.2 | |
| Kerio Personal Firewall | =4.0.11 | |
| Kerio Personal Firewall | =4.0.14 | |
| Kerio Personal Firewall | =4.0.6 | |
| Kerio Personal Firewall | =4.0.9 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.matousec.com/info/advisories/Kerio-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php
- http://www.securityfocus.com/bid/20299
- http://secunia.com/advisories/22234
- http://securitytracker.com/id?1016967
- http://securityreason.com/securityalert/1685
- http://www.vupen.com/english/advisories/2006/3872
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29313
- http://www.securityfocus.com/archive/1/447504/100/0/threaded
- collector/nvd-historical
- vendor/kerio
- product/personal firewall
- canonical/kerio personal firewall
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- version/kerio personal firewall/4.1.0
- version/kerio personal firewall/4.0.12
- version/kerio personal firewall/4.0.13
- version/kerio personal firewall/4.1
- version/kerio personal firewall/4.3.246
- version/kerio personal firewall/4.2
- version/kerio personal firewall/4.0.15
- version/kerio personal firewall/4.1.1
- version/kerio personal firewall/4.0.8
- version/kerio personal firewall/4.0.7
- version/kerio personal firewall/4.0.16
- version/kerio personal firewall/4.0.10
- version/kerio personal firewall/4.3.268
- version/kerio personal firewall/4.1.2
- version/kerio personal firewall/4.0.11
- version/kerio personal firewall/4.0.14
- version/kerio personal firewall/4.0.6
- version/kerio personal firewall/4.0.9