CVE-2004-1109 The FWDRV.SYS driver in Kerio Personal Firewall 4.1.1 and earlier allows remote attackers to cause a denial of service (CPU consumption and system freeze from infinite loop) via a (1) TCP, (2) UDP, or...
MediumCVSS 5.0
EPSS 3.2%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The FWDRV.SYS driver in Kerio Personal Firewall 4.1.1 and earlier allows remote attackers to cause a denial of service (CPU consumption and system freeze from infinite loop) via a (1) TCP, (2) UDP, or (3) ICMP packet with a zero length IP Option field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kerio personal firewall | = 4.0.6 | No fix listed |
| kerio personal firewall | = 4.0.7 | No fix listed |
| kerio personal firewall | = 4.0.8 | No fix listed |
| kerio personal firewall | = 4.0.9 | No fix listed |
| kerio personal firewall | = 4.0.10 | No fix listed |
| kerio personal firewall | = 4.0.16 | No fix listed |
| kerio personal firewall | = 4.1 | No fix listed |
| kerio personal firewall | = 4.1.1 | No fix listed |
References
- AD20041109 third-party-advisory
- www.kerio.com vendor-advisory
- 11639 exploit patch vdb-entry vendor-advisory
- kerio-pf-packet-dos(17992) vdb-entry