CVE:CVE-2004-1658
CNNVD:CNNVD-200409-006
Kerio Personal Firewall 4.0 (KPF4)存在漏洞。有管理权限的本地用户通过直接写到\device\physicalmemory恢复kernel's SDT ServiceTable的运行来绕过应用安全功能和执行任意进程。
solution:Upgrade kerio personal_firewall to a higher version than 4.0.6,4.0.7,4.0.8,4.0.9,4.0.10,4.0.16,and avoid the version 4.0.6,4.0.7,4.0.8,4.0.9,4.0.10,4.0.16