CVE-2006-5153 - The (1) fwdrv.sys and (2) khips.sys drivers in Sunbelt Kerio Personal Firewall 4.3.268 and earlier do not validate arguments passed through to SSDT functions, including NtCreateFile, NtDeleteFile, NtLoadDriver, NtMapViewOfSection, NtOpenFile, and NtSetInformationFile, which allows local users to cause a denial of service (crash) and possibly other impacts via unspecified vectors

Back Back to CVE browser

MEDIUM

The (1) fwdrv.sys and (2) khips.sys drivers in Sunbelt Kerio Personal Firewall 4.3.268 and earlier do not validate arguments passed through to SSDT functions, including NtCreateFile, NtDeleteFile, NtLoadDriver, NtMapViewOfSection, NtOpenFile, and NtSetInformationFile, which allows local users to cause a denial of service (crash) and possibly other impacts via unspecified vectors

Published Oct 3, 2006

5.0

MEDIUM

CVSS 2.0

EPSS 1.57%

Description

The (1) fwdrv.sys and (2) khips.sys drivers in Sunbelt Kerio Personal Firewall 4.3.268 and earlier do not validate arguments passed through to SSDT functions, including NtCreateFile, NtDeleteFile, NtLoadDriver, NtMapViewOfSection, NtOpenFile, and NtSetInformationFile, which allows local users to cause a denial of service (crash) and possibly other impacts via unspecified vectors.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (8)

http://secunia.com/advisories/22234
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securityreason.com/securityalert/1685
third-party-advisoryx_refsource_SREASON
http://securitytracker.com/id?1016967
vdb-entryx_refsource_SECTRACK
http://www.matousec.com/info/advisories/Kerio-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php
x_refsource_MISCExploitVendor Advisory
http://www.securityfocus.com/archive/1/447504/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/20299
vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/3872
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/29313
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/22234		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securityreason.com/securityalert/1685		third-party-advisoryx_refsource_SREASON
http://securitytracker.com/id?1016967		vdb-entryx_refsource_SECTRACK
http://www.matousec.com/info/advisories/Kerio-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php		x_refsource_MISCExploitVendor Advisory
http://www.securityfocus.com/archive/1/447504/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/20299		vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/3872		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/29313		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 3, 2006

Updated Aug 7, 2024

Reserved Oct 3, 2006

Link CVE-2006-5153

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-5153

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-5153