CVE-2006-5153
Summary
| CVE | CVE-2006-5153 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2006-10-05 04:04:00 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | The (1) fwdrv.sys and (2) khips.sys drivers in Sunbelt Kerio Personal Firewall 4.3.268 and earlier do not validate arguments passed through to SSDT functions, including NtCreateFile, NtDeleteFile, NtLoadDriver, NtMapViewOfSection, NtOpenFile, and NtSetInformationFile, which allows local users to cause a denial of service (crash) and possibly other impacts via unspecified vectors. |
Risk And Classification
Primary CVSS: v2.0 5 from [email protected]
AV:N/AC:L/Au:N/C:N/I:N/A:P
Problem Types: NVD-CWE-Other | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
NoneIntegrity
NoneAvailability
PartialAV:N/AC:L/Au:N/C:N/I:N/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Kerio | Personal Firewall | 4.0.10 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.11 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.12 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.13 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.14 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.15 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.16 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.6 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.7 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.8 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.9 | All | All | All |
| Application | Kerio | Personal Firewall | 4.1 | All | All | All |
| Application | Kerio | Personal Firewall | 4.1.0 | All | All | All |
| Application | Kerio | Personal Firewall | 4.1.1 | All | All | All |
| Application | Kerio | Personal Firewall | 4.1.2 | All | All | All |
| Application | Kerio | Personal Firewall | 4.2 | All | All | All |
| Application | Kerio | Personal Firewall | 4.3.246 | All | All | All |
| Application | Kerio | Personal Firewall | 4.3.268 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| SecurityReason - Kerio Multiple insufficient argument validation of hooked SSDT function Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | securityreason.com | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| SecurityTracker.com Archives - Sunbelt Kerio Personal Firewall Input Validation Flaws in Hooked System Calls Let Local Users Deny Service | af854a3a-2127-422b-91ae-364da2661108 | securitytracker.com | |
| Advisory 2006-10-01.01 - matousec.com | af854a3a-2127-422b-91ae-364da2661108 | www.matousec.com | Exploit, Vendor Advisory |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| SecurityFocus | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| Sunbelt Kerio Personal Firewall Multiple Local Denial of Service Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | Exploit |
| Kerio Personal Firewall Hooked Functions Denial of Service - Advisories - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.