PT-2005-4097 · Kerio · Kerio Personal Firewall+2

Piotr Bania · Publicado 2005-10-23 · Atualizado 2012-12-13 · CVE-2005-3286

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Kerio Personal Firewall version 4.2 Kerio Server Firewall version 1.1.1

Description The issue allows local users to cause a denial of service by setting specific protection on the Page Environment Block (PEB), which triggers an exception. This is related to the FWDRV driver.

Recommendations For Kerio Personal Firewall version 4.2, consider disabling the FWDRV driver as a temporary workaround until a patch is available. For Kerio Server Firewall version 1.1.1, restrict access to the FWDRV driver to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-3286

Produtos afetados

Fwdrv Driver

Kerio Personal Firewall

Kerio Serverfirewall

Referências · 9

• http://pb.specialised.info/all/adv/kerio-fwdrv-dos-adv.txt · Aviso do Fabricante
• http://securityreason.com/securityalert/78 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3286 · Nota de Segurança
• http://secunia.com/advisories/17155 · Aviso do Fabricante
• http://kerio.com/security_advisory.html · Aviso do Fabricante
• http://lists.grok.org.uk/pipermail/full-disclosure/2005-October/037958.html · Aviso do Fabricante
• http://seclists.org/bugtraq/2005/Oct/166 · Nota
• http://osvdb.org/19961 · Nota
• http://securityfocus.com/bid/15094 · Nota