CVE-2007-0081 Sunbelt Kerio Personal Firewall (SKPF) 4.3.268 and 4.3.246, and possibly other versions allows local users to provide a Trojan horse iphlpapi.dll to SKPF by placing it in the installation directory.
MediumCVSS 6.8
EPSS 0.66%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Sunbelt Kerio Personal Firewall (SKPF) 4.3.268 and 4.3.246, and possibly other versions allows local users to provide a Trojan horse iphlpapi.dll to SKPF by placing it in the installation directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sunbelt kerio personal firewall | = 4.3.246 | No fix listed |
| sunbelt kerio personal firewall | = 4.3.268 | No fix listed |
References
- 2095 third-party-advisory
- www.matousec.com vendor-advisory
- 33356 vdb-entry
- 20070101 Kerio Fake 'iphlpapi' DLL injection Vulnerability mailing-list
- 21828 vdb-entry
- kerio-directory-code-execution(31232) vdb-entry