CVE Details for CVE: CVE-2003-0220
Summary
Buffer overflow in the administrator authentication process for Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to execute arbitrary code via a handshake packet.
| Timestamps | |
|---|---|
| Last major update | 18-10-2016 - 02:30 |
| Published | 12-05-2003 - 04:00 |
| Last modified | 18-10-2016 - 02:30 |
Vulnerable Configurations
-
cpe:2.3:a:kerio:personal_firewall_2:2.1:*:*:*:*:*:*:*
cpe:2.3:a:kerio:personal_firewall_2:2.1:*:*:*:*:*:*:*
-
cpe:2.3:a:kerio:personal_firewall_2:2.1.1:*:*:*:*:*:*:*
cpe:2.3:a:kerio:personal_firewall_2:2.1.1:*:*:*:*:*:*:*
-
cpe:2.3:a:kerio:personal_firewall_2:2.1.2:*:*:*:*:*:*:*
cpe:2.3:a:kerio:personal_firewall_2:2.1.2:*:*:*:*:*:*:*
-
cpe:2.3:a:kerio:personal_firewall_2:2.1.3:*:*:*:*:*:*:*
cpe:2.3:a:kerio:personal_firewall_2:2.1.3:*:*:*:*:*:*:*
-
cpe:2.3:a:kerio:personal_firewall_2:2.1.4:*:*:*:*:*:*:*
cpe:2.3:a:kerio:personal_firewall_2:2.1.4:*:*:*:*:*:*:*
CWE
CVSS
Base
7.5
Impact
6.4
Exploitability
10.0
Access
| Vector | Complexity | Authentication |
|---|---|---|
| NETWORK | LOW | NONE |
Impact
| Confidentiality | Integrity | Availability |
|---|---|---|
| PARTIAL | PARTIAL | PARTIAL |
CVSS3
None
VIA4 references
cvss-vector
via4
refmap
via4
| bid | 7180 |
| bugtraq | 20030428 CORE-2003-0305-02: Vulnerabilities in Kerio Personal Firewall |
| cert-vn | VU#454716 |
| misc | http://www.coresecurity.com/common/showdoc.php?idx=314&idxseccion=10 |
| vulnwatch | 20030428 CORE-2003-0305-02: Vulnerabilities in Kerio Personal Firewall |