CVE

Id
21257  
CVE No.
CVE-2006-5153  
Status
Candidate  
Description
The (1) fwdrv.sys and (2) khips.sys drivers in Sunbelt Kerio Personal Firewall 4.3.268 and earlier do not validate arguments passed through to SSDT functions, including NtCreateFile, NtDeleteFile, NtLoadDriver, NtMapViewOfSection, NtOpenFile, and NtSetInformationFile, which allows local users to cause a denial of service (crash) and possibly other impacts via unspecified vectors.  
Phase
Assigned (20061003)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
202098 21257 CVE-2006-5153 BUGTRAQ:20061001 Kerio Multiple insufficient argument validation of hooked SSDT function Vulnerability  View
202099 21257 CVE-2006-5153 URL:http://www.securityfocus.com/archive/1/archive/1/447504/100/0/threaded  View
202100 21257 CVE-2006-5153 MISC:http://www.matousec.com/info/advisories/Kerio-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php  View
202101 21257 CVE-2006-5153 BID:20299  View
202102 21257 CVE-2006-5153 URL:http://www.securityfocus.com/bid/20299  View
202103 21257 CVE-2006-5153 VUPEN:ADV-2006-3872  View
202104 21257 CVE-2006-5153 URL:http://www.vupen.com/english/advisories/2006/3872  View
202105 21257 CVE-2006-5153 SECTRACK:1016967  View
202106 21257 CVE-2006-5153 URL:http://securitytracker.com/id?1016967  View
202107 21257 CVE-2006-5153 SECUNIA:22234  View
202108 21257 CVE-2006-5153 URL:http://secunia.com/advisories/22234  View
202109 21257 CVE-2006-5153 SREASON:1685  View
202110 21257 CVE-2006-5153 URL:http://securityreason.com/securityalert/1685  View
202111 21257 CVE-2006-5153 XF:kerio-drivers-dos(29313)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60995 JVNDB-2006-003261 VideoDB の core/pdf.php における PHP リモートファイルインクルージョンの脆弱性 VideoDB の core/pdf.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-5155 21257 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003261.html  View