PT-2007-1566 · Sunbelt · Sunbelt Kerio Personal Firewall

Published 2007-01-05 · Updated 2018-10-16 · CVE-2007-0081

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sunbelt Kerio Personal Firewall (SKPF) versions 4.3.246 through 4.3.268

Description The issue allows local users to provide a Trojan horse iphlpapi.dll to SKPF by placing it in the installation directory. This could potentially lead to malicious activities.

Recommendations For versions 4.3.246 through 4.3.268, consider removing or restricting access to the iphlpapi.dll file in the installation directory until a fix is available. As a temporary workaround, monitor the installation directory for any suspicious files.

Exploit

Fix

Related Identifiers

CVE-2007-0081

Affected Products

Sunbelt Kerio Personal Firewall

References · 8

• 🔥 https://exploit-db.com/exploits/29374 · Exploit
• http://matousec.com/info/advisories/Kerio-Fake-iphlpapi-DLL-injection.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-0081 · Security Note
• http://osvdb.org/33356 · Note
• http://securityfocus.com/archive/1/455624/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31232 · Note
• http://securityreason.com/securityalert/2095 · Note
• http://securityfocus.com/bid/21828 · Note