CVE-2006-5153

The (1) fwdrv.sys and (2) khips.sys drivers in Sunbelt Kerio Personal Firewall 4.3.268 and earlier do not validate arguments passed through to SSDT functions, including NtCreateFile, NtDeleteFile, NtLoadDriver, NtMapViewOfSection, NtOpenFile, and NtSetInformationFile, which allows local users to cause a denial of service (crash) and possibly other impacts via unspecified vectors.

• http://secunia.com/advisories/22234Vendor Advisory
• http://securityreason.com/securityalert/1685
• http://securitytracker.com/id?1016967
• http://www.matousec.com/info/advisories/Kerio-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.phpExploit, Vendor Advisory
• http://www.securityfocus.com/archive/1/447504/100/0/threaded
• http://www.securityfocus.com/bid/20299Exploit
• http://www.vupen.com/english/advisories/2006/3872
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29313
• http://secunia.com/advisories/22234Vendor Advisory
• http://securityreason.com/securityalert/1685
• http://securitytracker.com/id?1016967
• http://www.matousec.com/info/advisories/Kerio-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.phpExploit, Vendor Advisory
• http://www.securityfocus.com/archive/1/447504/100/0/threaded
• http://www.securityfocus.com/bid/20299Exploit
• http://www.vupen.com/english/advisories/2006/3872
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29313

Published

Oct 5, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-5147PHP remote file inclusion vulnerability in wamp_dir/setup/ye…
• CVE-2006-5148Multiple PHP remote file inclusion vulnerabilities in Forum8…
• CVE-2006-5149Multiple directory traversal vulnerabilities in OpenBiblio b…
• CVE-2006-5150SQL injection vulnerability in the reports system in OpenBib…
• CVE-2006-5151Unspecified vulnerability in HP Ignite-UX server before C.6.…
• CVE-2006-5152Cross-site scripting (XSS) vulnerability in Microsoft Intern…
• CVE-2006-5154PHP remote file inclusion vulnerability in cp/sig.php in Del…
• CVE-2006-5155PHP remote file inclusion vulnerability in core/pdf.php in V…
• CVE-2006-5156Buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.…
• CVE-2006-5157Format string vulnerability in the ActiveX control (ATXCONSO…
• CVE-2006-5158The nlmclnt_mark_reclaim in clntlock.c in NFS lockd in Linux…7.5
• CVE-2006-5159Stack-based buffer overflow in Mozilla Firefox allows remote…