CVE-2004-2329

high

Description

Kerio Personal Firewall (KPF) 2.1.5 allows local users to execute arbitrary code with SYSTEM privileges via the Load button in the Firewall Configuration Files option, which does not drop privileges before opening the file loading dialog box.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/14981

https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-2321

http://www.tuneld.com/news/?id=30

http://www.tuneld.com/_images/other/kpf_system_privileges.png

http://www.securitytracker.com/alerts/2004/Jan/1008870.html

http://www.securityfocus.com/bid/9525

http://www.osvdb.org/3748

http://secunia.com/advisories/10746/

Details

Source: Mitre, NVD

Published: 2004-12-31

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.8

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H