Lucene search

[email protected]CVE-2006-5153

HistoryOct 05, 2006 - 4:04 a.m.

CVE-2006-5153

2006-10-0504:04:00

[email protected]

web.nvd.nist.gov

sunbelt kerio

personal firewall

drivers

vulnerability

nvd

cve-2006-5153

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.7%

JSON

The (1) fwdrv.sys and (2) khips.sys drivers in Sunbelt Kerio Personal Firewall 4.3.268 and earlier do not validate arguments passed through to SSDT functions, including NtCreateFile, NtDeleteFile, NtLoadDriver, NtMapViewOfSection, NtOpenFile, and NtSetInformationFile, which allows local users to cause a denial of service (crash) and possibly other impacts via unspecified vectors.

Affected configurations

NVD

Node

keriopersonal_firewallMatch4.0.6

keriopersonal_firewallMatch4.0.7

keriopersonal_firewallMatch4.0.8

keriopersonal_firewallMatch4.0.9

keriopersonal_firewallMatch4.0.10

keriopersonal_firewallMatch4.0.11

keriopersonal_firewallMatch4.0.12

keriopersonal_firewallMatch4.0.13

keriopersonal_firewallMatch4.0.14

keriopersonal_firewallMatch4.0.15

keriopersonal_firewallMatch4.0.16

keriopersonal_firewallMatch4.1

keriopersonal_firewallMatch4.1.0

keriopersonal_firewallMatch4.1.1

keriopersonal_firewallMatch4.1.2

keriopersonal_firewallMatch4.2

keriopersonal_firewallMatch4.3.246

keriopersonal_firewallMatch4.3.268

CPENameOperatorVersion
kerio:personal_firewallkerio personal firewalleq4.0.6
kerio:personal_firewallkerio personal firewalleq4.0.7
kerio:personal_firewallkerio personal firewalleq4.0.8
kerio:personal_firewallkerio personal firewalleq4.0.9
kerio:personal_firewallkerio personal firewalleq4.0.10
kerio:personal_firewallkerio personal firewalleq4.0.11
kerio:personal_firewallkerio personal firewalleq4.0.12
kerio:personal_firewallkerio personal firewalleq4.0.13
kerio:personal_firewallkerio personal firewalleq4.0.14
kerio:personal_firewallkerio personal firewalleq4.0.15

CPE	Name	Operator	Version
kerio:personal_firewall	kerio personal firewall	eq	4.0.6
kerio:personal_firewall	kerio personal firewall	eq	4.0.7
kerio:personal_firewall	kerio personal firewall	eq	4.0.8
kerio:personal_firewall	kerio personal firewall	eq	4.0.9
kerio:personal_firewall	kerio personal firewall	eq	4.0.10
kerio:personal_firewall	kerio personal firewall	eq	4.0.11
kerio:personal_firewall	kerio personal firewall	eq	4.0.12
kerio:personal_firewall	kerio personal firewall	eq	4.0.13
kerio:personal_firewall	kerio personal firewall	eq	4.0.14
kerio:personal_firewall	kerio personal firewall	eq	4.0.15

Rows per page:

1-10 of 181

References

secunia.com/advisories/22234

securityreason.com/securityalert/1685

securitytracker.com/id?1016967

www.matousec.com/info/advisories/Kerio-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php

www.securityfocus.com/archive/1/447504/100/0/threaded

www.securityfocus.com/bid/20299

www.vupen.com/english/advisories/2006/3872

exchange.xforce.ibmcloud.com/vulnerabilities/29313

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.7%

JSON

Related for CVE-2006-5153

nvd1 cvelist1