Exploitation Summary
EIP tracks 6 public exploits for CVE-2003-0220.
PoCs published by Metasploit, y0, Burebista, including Metasploit module exploits/windows/firewall/kerio_auth.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in Kerio Personal Firewall 2.1.4's authentication process. It sends a maliciously crafted packet to trigger the overflow and execute arbitrary code via a reverse shell.
Description
Buffer overflow in the administrator authentication process for Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to execute arbitrary code via a handshake packet.
Exploits (6)
This exploit targets a stack buffer overflow in Kerio Personal Firewall 2.1.4's authentication process. It sends a maliciously crafted packet to trigger the overflow and execute arbitrary code via a reverse shell.
This exploit targets a stack-based buffer overflow in Kerio Personal Firewall 2.1.4's authentication process. It sends a crafted packet with alphanumeric padding, shellcode, and a return address to achieve remote code execution.
This exploit targets a buffer overflow vulnerability in Kerio Personal Firewall v2.1.4, allowing remote code execution via a crafted packet sent to port 44334. The shellcode downloads and executes a payload from a remote URL.
This exploit targets a buffer overflow vulnerability in Kerio Personal Firewall and Tiny Personal Firewall during the administration authentication process. It sends a malicious packet with excessive data to execute arbitrary commands on the target system.
This exploit targets a buffer overflow vulnerability in Kerio Personal Firewall 2.1.4 and earlier during the administration authentication process. It sends a malicious packet with excessive data to trigger the overflow, potentially allowing arbitrary command execution with firewall privileges.
This Metasploit module exploits a stack buffer overflow in Kerio Personal Firewall 2.1.4 by sending a maliciously crafted authentication packet to port 44334, leading to remote code execution. The exploit uses a NOP sled, encoded payload, and target-specific return addresses to achieve reliability.