Search
Find a vulnerability
Search criteria
4 vulnerabilities by sunbelt
VAR-200701-0489
Vulnerability from variot - Updated: 2025-04-10 23:16Sunbelt Kerio Personal Firewall (SKPF) 4.3.268 and 4.3.246, and possibly other versions allows local users to provide a Trojan horse iphlpapi.dll to SKPF by placing it in the installation directory. A local attacker could exploit this issue to execute arbitrary machine code with SYSTEM-level privileges. A successful exploit could result in the complete compromise of the affected computer. Versions 4.3.246 and 4.3.268 are vulnerable to this issue; other versions may also be affected. If it cannot be found, it loads it from the operating system directory. Moreover, the software installation directory is writable, and local attackers can create fake ones. DLL file, the firewall service loads and executes the code in it when it is initialized, resulting in the execution of arbitrary instructions of the attacker
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200701-0489",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "kerio personal firewall",
"scope": "eq",
"trust": 1.6,
"vendor": "sunbelt",
"version": "4.3.246"
},
{
"model": "kerio personal firewall",
"scope": "eq",
"trust": 1.6,
"vendor": "sunbelt",
"version": "4.3.268"
},
{
"model": "kerio personal firewall",
"scope": "eq",
"trust": 0.8,
"vendor": "sunbelt",
"version": "4.3.268 and 4.3.246"
},
{
"model": "software kerio personal firewall",
"scope": "eq",
"trust": 0.3,
"vendor": "sunbelt",
"version": "4.3.468"
},
{
"model": "software kerio personal firewall",
"scope": "eq",
"trust": 0.3,
"vendor": "sunbelt",
"version": "4.3.426"
}
],
"sources": [
{
"db": "BID",
"id": "21828"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-004910"
},
{
"db": "CNNVD",
"id": "CNNVD-200701-037"
},
{
"db": "NVD",
"id": "CVE-2007-0081"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:sunbelt:sunbelt_kerio_personal_firewall",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2007-004910"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Matousec http://www.matousec.com/",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200701-037"
}
],
"trust": 0.6
},
"cve": "CVE-2007-0081",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "SINGLE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 6.8,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 3.1,
"id": "CVE-2007-0081",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "SINGLE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 6.8,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 3.1,
"id": "VHN-23443",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:L/AC:L/AU:S/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2007-0081",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2007-0081",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNNVD",
"id": "CNNVD-200701-037",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-23443",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-23443"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-004910"
},
{
"db": "CNNVD",
"id": "CNNVD-200701-037"
},
{
"db": "NVD",
"id": "CVE-2007-0081"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Sunbelt Kerio Personal Firewall (SKPF) 4.3.268 and 4.3.246, and possibly other versions allows local users to provide a Trojan horse iphlpapi.dll to SKPF by placing it in the installation directory. \nA local attacker could exploit this issue to execute arbitrary machine code with SYSTEM-level privileges. A successful exploit could result in the complete compromise of the affected computer. \nVersions 4.3.246 and 4.3.268 are vulnerable to this issue; other versions may also be affected. If it cannot be found, it loads it from the operating system directory. Moreover, the software installation directory is writable, and local attackers can create fake ones. DLL file, the firewall service loads and executes the code in it when it is initialized, resulting in the execution of arbitrary instructions of the attacker",
"sources": [
{
"db": "NVD",
"id": "CVE-2007-0081"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-004910"
},
{
"db": "BID",
"id": "21828"
},
{
"db": "VULHUB",
"id": "VHN-23443"
}
],
"trust": 1.98
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-23443",
"trust": 0.1,
"type": "unknown"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-23443"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2007-0081",
"trust": 2.5
},
{
"db": "BID",
"id": "21828",
"trust": 2.0
},
{
"db": "SREASON",
"id": "2095",
"trust": 1.7
},
{
"db": "OSVDB",
"id": "33356",
"trust": 1.7
},
{
"db": "JVNDB",
"id": "JVNDB-2007-004910",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-200701-037",
"trust": 0.7
},
{
"db": "BUGTRAQ",
"id": "20070101 KERIO FAKE \u0027IPHLPAPI\u0027 DLL INJECTION VULNERABILITY",
"trust": 0.6
},
{
"db": "XF",
"id": "31232",
"trust": 0.6
},
{
"db": "EXPLOIT-DB",
"id": "29374",
"trust": 0.1
},
{
"db": "SEEBUG",
"id": "SSVID-82883",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-23443",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-23443"
},
{
"db": "BID",
"id": "21828"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-004910"
},
{
"db": "CNNVD",
"id": "CNNVD-200701-037"
},
{
"db": "NVD",
"id": "CVE-2007-0081"
}
]
},
"id": "VAR-200701-0489",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-23443"
}
],
"trust": 0.01
},
"last_update_date": "2025-04-10T23:16:51.870000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "http://www.kerio.com/"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2007-004910"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-Other",
"trust": 1.0
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2007-0081"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.0,
"url": "http://www.matousec.com/info/advisories/kerio-fake-iphlpapi-dll-injection.php"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/21828"
},
{
"trust": 1.7,
"url": "http://www.osvdb.org/33356"
},
{
"trust": 1.7,
"url": "http://securityreason.com/securityalert/2095"
},
{
"trust": 1.1,
"url": "http://www.securityfocus.com/archive/1/455624/100/0/threaded"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31232"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2007-0081"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2007-0081"
},
{
"trust": 0.6,
"url": "http://xforce.iss.net/xforce/xfdb/31232"
},
{
"trust": 0.6,
"url": "http://www.securityfocus.com/archive/1/archive/1/455624/100/0/threaded"
},
{
"trust": 0.3,
"url": "http://www.sunbelt-software.com/kerio.cfm"
},
{
"trust": 0.3,
"url": "/archive/1/455624"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-23443"
},
{
"db": "BID",
"id": "21828"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-004910"
},
{
"db": "CNNVD",
"id": "CNNVD-200701-037"
},
{
"db": "NVD",
"id": "CVE-2007-0081"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-23443"
},
{
"db": "BID",
"id": "21828"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-004910"
},
{
"db": "CNNVD",
"id": "CNNVD-200701-037"
},
{
"db": "NVD",
"id": "CVE-2007-0081"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2007-01-05T00:00:00",
"db": "VULHUB",
"id": "VHN-23443"
},
{
"date": "2007-01-01T00:00:00",
"db": "BID",
"id": "21828"
},
{
"date": "2012-12-20T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2007-004910"
},
{
"date": "2007-01-05T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200701-037"
},
{
"date": "2007-01-05T11:28:00",
"db": "NVD",
"id": "CVE-2007-0081"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-10-16T00:00:00",
"db": "VULHUB",
"id": "VHN-23443"
},
{
"date": "2007-01-04T18:28:00",
"db": "BID",
"id": "21828"
},
{
"date": "2012-12-20T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2007-004910"
},
{
"date": "2007-01-15T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200701-037"
},
{
"date": "2025-04-09T00:30:58.490000",
"db": "NVD",
"id": "CVE-2007-0081"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "local",
"sources": [
{
"db": "BID",
"id": "21828"
},
{
"db": "CNNVD",
"id": "CNNVD-200701-037"
}
],
"trust": 0.9
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "SKPF Trojan horse in iphlpapi.dll Vulnerability provided",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2007-004910"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Design Error",
"sources": [
{
"db": "BID",
"id": "21828"
},
{
"db": "CNNVD",
"id": "CNNVD-200701-037"
}
],
"trust": 0.9
}
}
VAR-200607-0364
Vulnerability from variot - Updated: 2025-04-03 22:31kpf4ss.exe in Sunbelt Kerio Personal Firewall 4.3.x before 4.3.268 does not properly hook the CreateRemoteThread API function, which allows local users to cause a denial of service (crash) and bypass protection mechanisms by calling CreateRemoteThread. Sunbelt Kerio Personal Firewall is prone to a denial-of-service vulnerability. This issue can occur when a program calls the 'CreateRemoteThread' Windows API call. Exploitation of this vulnerability could cause the firewall application to crash. This could expose the computer to further attacks. The individual who discovered this vulnerability claims to have tested it on Sunbelt Kerio Personal Firewall versions 4.3.246 and 4.2.3.912. They were unable to reproduce the vulnerability on version 4.2.3.912, which is an older release. The vulnerable functionality may have been introduced at some point after the 4.2.3.912 release, but this has not been confirmed
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200607-0364",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "personal firewall",
"scope": "lte",
"trust": 1.0,
"vendor": "kerio",
"version": "4.3.246"
},
{
"model": "personal firewall",
"scope": "eq",
"trust": 0.8,
"vendor": "kerio",
"version": "4.3.268"
},
{
"model": "personal firewall",
"scope": "lt",
"trust": 0.8,
"vendor": "kerio",
"version": "4.3.x"
},
{
"model": "personal firewall",
"scope": "eq",
"trust": 0.6,
"vendor": "kerio",
"version": "4.3.246"
},
{
"model": "software kerio personal firewall",
"scope": "eq",
"trust": 0.3,
"vendor": "sunbelt",
"version": "4.3.426"
},
{
"model": "software kerio personal firewall",
"scope": "ne",
"trust": 0.3,
"vendor": "sunbelt",
"version": "4.2.3912"
}
],
"sources": [
{
"db": "BID",
"id": "18996"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-002875"
},
{
"db": "CNNVD",
"id": "CNNVD-200607-390"
},
{
"db": "NVD",
"id": "CVE-2006-3787"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:kerio:personal_firewall",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2006-002875"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Discovery is credited to David Matousek.",
"sources": [
{
"db": "BID",
"id": "18996"
},
{
"db": "CNNVD",
"id": "CNNVD-200607-390"
}
],
"trust": 0.9
},
"cve": "CVE-2006-3787",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 2.1,
"confidentialityImpact": "NONE",
"exploitabilityScore": 3.9,
"id": "CVE-2006-3787",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "LOW",
"trust": 1.9,
"vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 2.1,
"confidentialityImpact": "NONE",
"exploitabilityScore": 3.9,
"id": "VHN-19895",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "LOW",
"trust": 0.1,
"vectorString": "AV:L/AC:L/AU:N/C:N/I:N/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2006-3787",
"trust": 1.0,
"value": "LOW"
},
{
"author": "NVD",
"id": "CVE-2006-3787",
"trust": 0.8,
"value": "Low"
},
{
"author": "CNNVD",
"id": "CNNVD-200607-390",
"trust": 0.6,
"value": "LOW"
},
{
"author": "VULHUB",
"id": "VHN-19895",
"trust": 0.1,
"value": "LOW"
},
{
"author": "VULMON",
"id": "CVE-2006-3787",
"trust": 0.1,
"value": "LOW"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-19895"
},
{
"db": "VULMON",
"id": "CVE-2006-3787"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-002875"
},
{
"db": "CNNVD",
"id": "CNNVD-200607-390"
},
{
"db": "NVD",
"id": "CVE-2006-3787"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "kpf4ss.exe in Sunbelt Kerio Personal Firewall 4.3.x before 4.3.268 does not properly hook the CreateRemoteThread API function, which allows local users to cause a denial of service (crash) and bypass protection mechanisms by calling CreateRemoteThread. Sunbelt Kerio Personal Firewall is prone to a denial-of-service vulnerability. This issue can occur when a program calls the \u0027CreateRemoteThread\u0027 Windows API call. \nExploitation of this vulnerability could cause the firewall application to crash. This could expose the computer to further attacks. \nThe individual who discovered this vulnerability claims to have tested it on Sunbelt Kerio Personal Firewall versions 4.3.246 and 4.2.3.912. They were unable to reproduce the vulnerability on version 4.2.3.912, which is an older release. The vulnerable functionality may have been introduced at some point after the 4.2.3.912 release, but this has not been confirmed",
"sources": [
{
"db": "NVD",
"id": "CVE-2006-3787"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-002875"
},
{
"db": "BID",
"id": "18996"
},
{
"db": "VULHUB",
"id": "VHN-19895"
},
{
"db": "VULMON",
"id": "CVE-2006-3787"
}
],
"trust": 2.07
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-19895",
"trust": 0.1,
"type": "unknown"
},
{
"reference": "https://vulmon.com/exploitdetails?qidtp=exploitdb\u0026qid=28228",
"trust": 0.1,
"type": "exploit"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-19895"
},
{
"db": "VULMON",
"id": "CVE-2006-3787"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2006-3787",
"trust": 2.6
},
{
"db": "BID",
"id": "18996",
"trust": 2.1
},
{
"db": "VUPEN",
"id": "ADV-2006-2828",
"trust": 1.8
},
{
"db": "SREASON",
"id": "1260",
"trust": 1.8
},
{
"db": "SECUNIA",
"id": "21060",
"trust": 1.8
},
{
"db": "JVNDB",
"id": "JVNDB-2006-002875",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-200607-390",
"trust": 0.7
},
{
"db": "BUGTRAQ",
"id": "20060715 KERIO TERMINATING \u0027KPF4SS.EXE\u0027 USING INTERNAL RUNTIME ERROR VULNERABILITY",
"trust": 0.6
},
{
"db": "EXPLOIT-DB",
"id": "28228",
"trust": 0.2
},
{
"db": "SEEBUG",
"id": "SSVID-81805",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-19895",
"trust": 0.1
},
{
"db": "VULMON",
"id": "CVE-2006-3787",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-19895"
},
{
"db": "VULMON",
"id": "CVE-2006-3787"
},
{
"db": "BID",
"id": "18996"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-002875"
},
{
"db": "CNNVD",
"id": "CNNVD-200607-390"
},
{
"db": "NVD",
"id": "CVE-2006-3787"
}
]
},
"id": "VAR-200607-0364",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-19895"
}
],
"trust": 0.01
},
"last_update_date": "2025-04-03T22:31:26.282000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Personal Firewall",
"trust": 0.8,
"url": "http://www.vipreantivirus.com/VIPRE-Internet-Security/"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2006-002875"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-Other",
"trust": 1.0
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2006-3787"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.1,
"url": "http://www.matousec.com/info/advisories/kerio-terminating-kpf4ss-exe-using-internal-runtime-error.php"
},
{
"trust": 1.8,
"url": "http://www.securityfocus.com/bid/18996"
},
{
"trust": 1.8,
"url": "http://secunia.com/advisories/21060"
},
{
"trust": 1.8,
"url": "http://securityreason.com/securityalert/1260"
},
{
"trust": 1.2,
"url": "http://www.securityfocus.com/archive/1/440112/100/100/threaded"
},
{
"trust": 1.2,
"url": "http://www.vupen.com/english/advisories/2006/2828"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2006-3787"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2006-3787"
},
{
"trust": 0.6,
"url": "http://www.securityfocus.com/archive/1/archive/1/440112/100/100/threaded"
},
{
"trust": 0.6,
"url": "http://www.frsirt.com/english/advisories/2006/2828"
},
{
"trust": 0.3,
"url": "http://www.sunbelt-software.com/kerio.cfm"
},
{
"trust": 0.3,
"url": "/archive/1/440112"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
},
{
"trust": 0.1,
"url": "https://www.exploit-db.com/exploits/28228/"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-19895"
},
{
"db": "VULMON",
"id": "CVE-2006-3787"
},
{
"db": "BID",
"id": "18996"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-002875"
},
{
"db": "CNNVD",
"id": "CNNVD-200607-390"
},
{
"db": "NVD",
"id": "CVE-2006-3787"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-19895"
},
{
"db": "VULMON",
"id": "CVE-2006-3787"
},
{
"db": "BID",
"id": "18996"
},
{
"db": "JVNDB",
"id": "JVNDB-2006-002875"
},
{
"db": "CNNVD",
"id": "CNNVD-200607-390"
},
{
"db": "NVD",
"id": "CVE-2006-3787"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2006-07-24T00:00:00",
"db": "VULHUB",
"id": "VHN-19895"
},
{
"date": "2006-07-24T00:00:00",
"db": "VULMON",
"id": "CVE-2006-3787"
},
{
"date": "2006-07-15T00:00:00",
"db": "BID",
"id": "18996"
},
{
"date": "2012-12-20T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2006-002875"
},
{
"date": "2006-07-24T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200607-390"
},
{
"date": "2006-07-24T12:19:00",
"db": "NVD",
"id": "CVE-2006-3787"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-10-17T00:00:00",
"db": "VULHUB",
"id": "VHN-19895"
},
{
"date": "2018-10-17T00:00:00",
"db": "VULMON",
"id": "CVE-2006-3787"
},
{
"date": "2006-07-28T22:27:00",
"db": "BID",
"id": "18996"
},
{
"date": "2012-12-20T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2006-002875"
},
{
"date": "2006-09-20T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200607-390"
},
{
"date": "2025-04-03T01:03:51.193000",
"db": "NVD",
"id": "CVE-2006-3787"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "local",
"sources": [
{
"db": "BID",
"id": "18996"
},
{
"db": "CNNVD",
"id": "CNNVD-200607-390"
}
],
"trust": 0.9
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Sunbelt Kerio Personal Firewall of kpf4ss.exe Service disruption in (DoS) Vulnerabilities",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2006-002875"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "lack of information",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200607-390"
}
],
"trust": 0.6
}
}
CVE-2007-0081 (GCVE-0-2007-0081)
Vulnerability from nvd – Published: 2007-01-05 11:00 – Updated: 2024-08-07 12:03
VLAI
EPSS
VEX
Summary
Sunbelt Kerio Personal Firewall (SKPF) 4.3.268 and 4.3.246, and possibly other versions allows local users to provide a Trojan horse iphlpapi.dll to SKPF by placing it in the installation directory.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| http://www.matousec.com/info/advisories/Kerio-Fak… | x_refsource_MISC |
| http://www.osvdb.org/33356 | vdb-entryx_refsource_OSVDB |
| http://www.securityfocus.com/archive/1/455624/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.securityfocus.com/bid/21828 | vdb-entryx_refsource_BID |
| http://securityreason.com/securityalert/2095 | third-party-advisoryx_refsource_SREASON |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
Date Public
2007-01-01 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T12:03:37.155Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.matousec.com/info/advisories/Kerio-Fake-iphlpapi-DLL-injection.php"
},
{
"name": "33356",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/33356"
},
{
"name": "20070101 Kerio Fake \u0027iphlpapi\u0027 DLL injection Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/455624/100/0/threaded"
},
{
"name": "21828",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/21828"
},
{
"name": "2095",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/2095"
},
{
"name": "kerio-directory-code-execution(31232)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31232"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-01-01T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Sunbelt Kerio Personal Firewall (SKPF) 4.3.268 and 4.3.246, and possibly other versions allows local users to provide a Trojan horse iphlpapi.dll to SKPF by placing it in the installation directory."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-16T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.matousec.com/info/advisories/Kerio-Fake-iphlpapi-DLL-injection.php"
},
{
"name": "33356",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/33356"
},
{
"name": "20070101 Kerio Fake \u0027iphlpapi\u0027 DLL injection Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/455624/100/0/threaded"
},
{
"name": "21828",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/21828"
},
{
"name": "2095",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/2095"
},
{
"name": "kerio-directory-code-execution(31232)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31232"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-0081",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Sunbelt Kerio Personal Firewall (SKPF) 4.3.268 and 4.3.246, and possibly other versions allows local users to provide a Trojan horse iphlpapi.dll to SKPF by placing it in the installation directory."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.matousec.com/info/advisories/Kerio-Fake-iphlpapi-DLL-injection.php",
"refsource": "MISC",
"url": "http://www.matousec.com/info/advisories/Kerio-Fake-iphlpapi-DLL-injection.php"
},
{
"name": "33356",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/33356"
},
{
"name": "20070101 Kerio Fake \u0027iphlpapi\u0027 DLL injection Vulnerability",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/455624/100/0/threaded"
},
{
"name": "21828",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/21828"
},
{
"name": "2095",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/2095"
},
{
"name": "kerio-directory-code-execution(31232)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31232"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-0081",
"datePublished": "2007-01-05T11:00:00.000Z",
"dateReserved": "2007-01-04T00:00:00.000Z",
"dateUpdated": "2024-08-07T12:03:37.155Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2007-0081 (GCVE-0-2007-0081)
Vulnerability from cvelistv5 – Published: 2007-01-05 11:00 – Updated: 2024-08-07 12:03
VLAI
EPSS
VEX
Summary
Sunbelt Kerio Personal Firewall (SKPF) 4.3.268 and 4.3.246, and possibly other versions allows local users to provide a Trojan horse iphlpapi.dll to SKPF by placing it in the installation directory.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| http://www.matousec.com/info/advisories/Kerio-Fak… | x_refsource_MISC |
| http://www.osvdb.org/33356 | vdb-entryx_refsource_OSVDB |
| http://www.securityfocus.com/archive/1/455624/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.securityfocus.com/bid/21828 | vdb-entryx_refsource_BID |
| http://securityreason.com/securityalert/2095 | third-party-advisoryx_refsource_SREASON |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
Date Public
2007-01-01 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T12:03:37.155Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.matousec.com/info/advisories/Kerio-Fake-iphlpapi-DLL-injection.php"
},
{
"name": "33356",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/33356"
},
{
"name": "20070101 Kerio Fake \u0027iphlpapi\u0027 DLL injection Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/455624/100/0/threaded"
},
{
"name": "21828",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/21828"
},
{
"name": "2095",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/2095"
},
{
"name": "kerio-directory-code-execution(31232)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31232"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-01-01T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Sunbelt Kerio Personal Firewall (SKPF) 4.3.268 and 4.3.246, and possibly other versions allows local users to provide a Trojan horse iphlpapi.dll to SKPF by placing it in the installation directory."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-16T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.matousec.com/info/advisories/Kerio-Fake-iphlpapi-DLL-injection.php"
},
{
"name": "33356",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/33356"
},
{
"name": "20070101 Kerio Fake \u0027iphlpapi\u0027 DLL injection Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/455624/100/0/threaded"
},
{
"name": "21828",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/21828"
},
{
"name": "2095",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/2095"
},
{
"name": "kerio-directory-code-execution(31232)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31232"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-0081",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Sunbelt Kerio Personal Firewall (SKPF) 4.3.268 and 4.3.246, and possibly other versions allows local users to provide a Trojan horse iphlpapi.dll to SKPF by placing it in the installation directory."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.matousec.com/info/advisories/Kerio-Fake-iphlpapi-DLL-injection.php",
"refsource": "MISC",
"url": "http://www.matousec.com/info/advisories/Kerio-Fake-iphlpapi-DLL-injection.php"
},
{
"name": "33356",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/33356"
},
{
"name": "20070101 Kerio Fake \u0027iphlpapi\u0027 DLL injection Vulnerability",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/455624/100/0/threaded"
},
{
"name": "21828",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/21828"
},
{
"name": "2095",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/2095"
},
{
"name": "kerio-directory-code-execution(31232)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31232"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-0081",
"datePublished": "2007-01-05T11:00:00.000Z",
"dateReserved": "2007-01-04T00:00:00.000Z",
"dateUpdated": "2024-08-07T12:03:37.155Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}