CVE-2004-1907 The Web Filtering functionality in Kerio Personal Firewall (KPF) 4.0.13 allows remote attackers to cause a denial of service (crash) by sending hex-encoded URLs containing "%13%12%13".
LowCVSS 2.6
EPSS 6.7%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The Web Filtering functionality in Kerio Personal Firewall (KPF) 4.0.13 allows remote attackers to cause a denial of service (crash) by sending hex-encoded URLs containing "%13%12%13".
Affected products
No affected product data has been published yet.
References
- 20040406 Kerio Personal Firewall 4 and IE 6 "Bug" exploit mailing-list
- 20040407 Kerio Personal Firewall 4.0.13 - Remote DoS (Crash) mailing-list
- 11331 exploit third-party-advisory
- www.cipher.org.uk exploit
- 10075 exploit vdb-entry
- kerio-pf-webfilter-dos(15821) vdb-entry