CVE-2004-1658

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-09-02 · updated 2026-06-16

Description

Kerio Personal Firewall 4.0 (KPF4) allows local users with administrative privileges to bypass the Application Security feature and execute arbitrary processes by directly writing to \device\physicalmemory to restore the running kernel's SDT ServiceTable.

Affected products

Kerio Personal Firewall: 4.0.6, 4.0.7, 4.0.8, 4.0.9, 4.0.10, 4.0.16

References

http://marc.info/?l=bugtraq&m=109420310631039&w=2
http://secunia.com/advisories/12468/
http://www.security.org.sg/vuln/kerio4016.html
http://www.securityfocus.com/bid/11096
https://exchange.xforce.ibmcloud.com/vulnerabilities/17270
http://marc.info/?l=bugtraq&m=109420310631039&w=2
http://secunia.com/advisories/12468/
http://www.security.org.sg/vuln/kerio4016.html
http://www.securityfocus.com/bid/11096
https://exchange.xforce.ibmcloud.com/vulnerabilities/17270

Get alerted when CVE-2004-1658 or the next vulnerability affects your stack