Kerio Personal Firewall Local Privilege Escalation Vulnerability

Bugtraq ID:	9525
Class:	Access Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Jan 29 2004 12:00AM
Updated:	Jan 29 2004 12:00AM
Credit:	The disclosure of this issue has been credited to Johan Tuneld <www.tuneld.com>.
Vulnerable:	Kerio Personal Firewall 2 2.1.5
Not Vulnerable:

Kerio Personal Firewall Local Privilege Escalation Vulnerability

It has been reported that Kerio Personal Firewall may be prone to a privilege escalation vulnerability that may allow an attacker to execute code with elevated privileges. It has been reported that a function used to load configuration files can be exploited to execute malicious applications with SYSTEM privileges.

Kerio Personal Firewall 2.1.5 has been reported to be prone to this issue, however, other versions could be affected as well.

Kerio Personal Firewall Local Privilege Escalation Vulnerability

A proof of concept demonstration can be found at the following location:

http://www.tuneld.com/_images/other/kpf_system_privileges.png

Kerio Personal Firewall Local Privilege Escalation Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Kerio Personal Firewall Local Privilege Escalation Vulnerability

References:

• Kerio Homepage (Kerio)
  
• Security Hole in KPF 2.1.5 (Johan Tuneld)