CVE-2003-0220 Buffer overflow in the administrator authentication process for Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to execute arbitrary code via a handshake packet.
HighCVSS 7.5
EPSS 69.1%
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the administrator authentication process for Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to execute arbitrary code via a handshake packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kerio personal firewall 2 | = 2.1 | No fix listed |
| kerio personal firewall 2 | = 2.1.1 | No fix listed |
| kerio personal firewall 2 | = 2.1.2 | No fix listed |
| kerio personal firewall 2 | = 2.1.3 | No fix listed |
| kerio personal firewall 2 | = 2.1.4 | No fix listed |
References
- 20030428 CORE-2003-0305-02: Vulnerabilities in Kerio Personal Firewall mailing-list
- www.coresecurity.com exploit patch vendor-advisory
- VU#454716 third-party-advisory us-government-resource
- 7180 vdb-entry