PT-2007-1566 · Sunbelt · Sunbelt Kerio Personal Firewall

Publicado 2007-01-05 · Atualizado 2018-10-16 · CVE-2007-0081

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sunbelt Kerio Personal Firewall (SKPF) versions 4.3.246 through 4.3.268

Description The issue allows local users to provide a Trojan horse iphlpapi.dll to SKPF by placing it in the installation directory. This could potentially lead to malicious activities.

Recommendations For versions 4.3.246 through 4.3.268, consider removing or restricting access to the iphlpapi.dll file in the installation directory until a fix is available. As a temporary workaround, monitor the installation directory for any suspicious files.

Exploit

Correção

Identificadores relacionados

CVE-2007-0081

Produtos afetados

Sunbelt Kerio Personal Firewall

Referências · 8

• 🔥 https://exploit-db.com/exploits/29374 · Exploit
• http://osvdb.org/33356 · Nota
• http://securityfocus.com/archive/1/455624/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31232 · Nota
• http://securityreason.com/securityalert/2095 · Nota
• http://matousec.com/info/advisories/Kerio-Fake-iphlpapi-DLL-injection.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-0081 · Nota de Segurança
• http://securityfocus.com/bid/21828 · Nota