CVE-2006-5153
Summary
| CVE | CVE-2006-5153 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2006-10-05 04:04:00 UTC |
| Updated | 2018-10-17 21:41:00 UTC |
| Description | The (1) fwdrv.sys and (2) khips.sys drivers in Sunbelt Kerio Personal Firewall 4.3.268 and earlier do not validate arguments passed through to SSDT functions, including NtCreateFile, NtDeleteFile, NtLoadDriver, NtMapViewOfSection, NtOpenFile, and NtSetInformationFile, which allows local users to cause a denial of service (crash) and possibly other impacts via unspecified vectors. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Kerio | Personal Firewall | 4.0.10 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.11 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.12 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.13 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.14 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.15 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.16 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.6 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.7 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.8 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.9 | All | All | All |
| Application | Kerio | Personal Firewall | 4.1 | All | All | All |
| Application | Kerio | Personal Firewall | 4.1.0 | All | All | All |
| Application | Kerio | Personal Firewall | 4.1.1 | All | All | All |
| Application | Kerio | Personal Firewall | 4.1.2 | All | All | All |
| Application | Kerio | Personal Firewall | 4.2 | All | All | All |
| Application | Kerio | Personal Firewall | 4.3.246 | All | All | All |
| Application | Kerio | Personal Firewall | 4.3.268 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.10 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.11 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.12 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.13 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.14 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.15 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.16 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.6 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.7 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.8 | All | All | All |
| Application | Kerio | Personal Firewall | 4.0.9 | All | All | All |
| Application | Kerio | Personal Firewall | 4.1 | All | All | All |
| Application | Kerio | Personal Firewall | 4.1.0 | All | All | All |
| Application | Kerio | Personal Firewall | 4.1.1 | All | All | All |
| Application | Kerio | Personal Firewall | 4.1.2 | All | All | All |
| Application | Kerio | Personal Firewall | 4.2 | All | All | All |
| Application | Kerio | Personal Firewall | 4.3.246 | All | All | All |
| Application | Kerio | Personal Firewall | 4.3.268 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Kerio Personal Firewall Hooked Functions Denial of Service - Advisories - Secunia | SECUNIA | secunia.com | Vendor Advisory |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| SecurityReason - Kerio Multiple insufficient argument validation of hooked SSDT function Vulnerability | SREASON | securityreason.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | |
| SecurityTracker.com Archives - Sunbelt Kerio Personal Firewall Input Validation Flaws in Hooked System Calls Let Local Users Deny Service | SECTRACK | securitytracker.com | |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| Sunbelt Kerio Personal Firewall Multiple Local Denial of Service Vulnerabilities | BID | www.securityfocus.com | Exploit |
| Advisory 2006-10-01.01 - matousec.com | MISC | www.matousec.com | Exploit, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.