cbcvebase.
CVE-2006-5153
published 2006-10-05

CVE-2006-5153: The (1) fwdrv.sys and (2) khips.sys drivers in Sunbelt Kerio Personal Firewall 4.3.268 and earlier do not validate arguments passed through to SSDT functions…

PriorityP417medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
1.56%
72.2th percentile
The (1) fwdrv.sys and (2) khips.sys drivers in Sunbelt Kerio Personal Firewall 4.3.268 and earlier do not validate arguments passed through to SSDT functions, including NtCreateFile, NtDeleteFile, NtLoadDriver, NtMapViewOfSection, NtOpenFile, and NtSetInformationFile, which allows local users to cause a denial of service (crash) and possibly other impacts via unspecified vectors.

Affected

18 ranges
VendorProductVersion rangeFixed in
keriopersonal_firewall——
keriopersonal_firewall——
keriopersonal_firewall——
keriopersonal_firewall——
keriopersonal_firewall——
keriopersonal_firewall——
keriopersonal_firewall——
keriopersonal_firewall——
keriopersonal_firewall——
keriopersonal_firewall——
keriopersonal_firewall——
keriopersonal_firewall——
keriopersonal_firewall——
keriopersonal_firewall——
keriopersonal_firewall——
keriopersonal_firewall——
keriopersonal_firewall——
keriopersonal_firewall——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.