Description
The FWDRV driver in Kerio Personal Firewall 4.2 and Server Firewall 1.1.1 allows local users to cause a denial of service (crash) by setting the PAGE_NOACCESS or PAGE_GUARD protection on the Page Environment Block (PEB), which triggers an exception, aka the "PEB lockout vulnerability."
References
- 78 third-party-advisory
- http://pb.specialised.info/all/adv/kerio-fwdrv-dos-adv.txt
- 15094 vdb-entry
- 19961 vdb-entry
- http://www.kerio.com/security_advisory.html
- 17155 third-party-advisory
- 20051013 Kerio Personal Firewall and Kerio Server Firewall FWDRV driver Local Denial of Service mailing-list
- 20051013 Kerio Personal Firewall and Kerio Server Firewall FWDRV driver Local Denial of Service mailing-list