CVE-2006-5153

no score yetEPSS 1.6%

kerio personal firewall: no CVSS score yet. EPSS 1.6% chance of exploitation in the next 30 days.

The (1) fwdrv.sys and (2) khips.sys drivers in Sunbelt Kerio Personal Firewall 4.3.268 and earlier do not validate arguments passed through to SSDT functions, including NtCreateFile, NtDeleteFile, NtLoadDriver, NtMapViewOfSection, NtOpenFile, and NtSetInformationFile, which allows local users to cause a denial of service (crash) and possibly other impacts via unspecified vectors.

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
Published: 2006-10-05
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

kerio:personal_firewall

References

http://secunia.com/advisories/22234
http://securityreason.com/securityalert/1685
http://securitytracker.com/id?1016967
http://www.matousec.com/info/advisories/Kerio-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php
http://www.securityfocus.com/archive/1/447504/100/0/threaded

Check your stack JSON