CVEvulnerability
CVE-2004-2329
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Kerio Personal Firewall (KPF) 2.1.5 allows local users to execute arbitrary code with SYSTEM privileges via the Load button in the Firewall Configuration Files option, which does not drop privileges before opening the file loading dialog box.
Affected configurations
• kerio personal firewall 2.1.5
References
- http://secunia.com/advisories/10746/ Vendor Advisory
- http://www.osvdb.org/3748 www.osvdb.org
- http://www.securityfocus.com/bid/9525 www.securityfocus.com
- http://www.securitytracker.com/alerts/2004/Jan/1008870.html Exploit
- http://www.tuneld.com/_images/other/kpf_system_privileges.png www.tuneld.com
- http://www.tuneld.com/news/?id=30 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14981 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/10746/ Vendor Advisory
- http://www.osvdb.org/3748 www.osvdb.org
- http://www.securityfocus.com/bid/9525 www.securityfocus.com
- http://www.securitytracker.com/alerts/2004/Jan/1008870.html Exploit
- http://www.tuneld.com/_images/other/kpf_system_privileges.png www.tuneld.com
- http://www.tuneld.com/news/?id=30 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14981 exchange.xforce.ibmcloud.com