Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to execute administrator commands by sniffing packets from a valid session and replaying them against the remote administration server.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2003-0214
http://www.securityfocus.com/bid/7179
http://www.kb.cert.org/vuls/id/641012
http://www.coresecurity.com/common/showdoc.php?idx=314&idxseccion=10