CVE-2004-1658

high

Description

Kerio Personal Firewall 4.0 (KPF4) allows local users with administrative privileges to bypass the Application Security feature and execute arbitrary processes by directly writing to \device\physicalmemory to restore the running kernel's SDT ServiceTable.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/17270

https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-1652

http://www.securityfocus.com/bid/11096

http://www.security.org.sg/vuln/kerio4016.html

http://secunia.com/advisories/12468/

http://marc.info/?l=bugtraq&m=109420310631039&w=2

Details

Source: Mitre, NVD

Published: 2004-09-02

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 7.8

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00924