Description
Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to execute administrator commands by sniffing packets from a valid session and replaying them against the remote administration server.
References
- 7179 vdb-entry
- 20030428 CORE-2003-0305-02: Vulnerabilities in Kerio Personal Firewall mailing-list
- http://www.coresecurity.com/common/showdoc.php?idx=314&idxseccion=10
- VU#641012 third-party-advisory