CVE-2004-2329
Kerio Personal Firewall (KPF) 2.1.5 allows local users to execute arbitrary code with SYSTEM...
Kerio Personal Firewall (KPF) 2.1.5 allows local users to execute arbitrary code with SYSTEM privileges via the Load button in the Firewall Configuration Files option, which does not drop privileges before opening the file loading dialog box.
Exploit likelihood
What each source reports
NVD Score used
Kerio Personal Firewall (KPF) 2.1.5 allows local users to execute arbitrary code with SYSTEM privileges via the Load button in the Firewall Configuration Files option, which does not drop privileges before opening the file loading dialog box.
- Record
CVE-2004-2329- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Kerio Personal Firewall (KPF) 2.1.5 allows local users to execute arbitrary code with SYSTEM privileges via the Load button in the Firewall Configuration Files option, which does not drop privileges before opening the file loading dialog box.
- Record
CVE-2004-2329- Updated
- 2026-11-02
EUVDEUVD-2004-2321 No score
Kerio Personal Firewall (KPF) 2.1.5 allows local users to execute arbitrary code with SYSTEM privileges via the Load button in the Firewall Configuration Files option, which does not drop privileges before opening the file loading dialog box.
- Record
EUVD-2004-2321- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-647w-cx37-q2h4 No score
Kerio Personal Firewall (KPF) 2.1.5 allows local users to execute arbitrary code with SYSTEM...
Kerio Personal Firewall (KPF) 2.1.5 allows local users to execute arbitrary code with SYSTEM privileges via the Load button in the Firewall Configuration Files option, which does not drop privileges before opening the file loading dialog box.
- Record
GHSA-647w-cx37-q2h4- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-2329 is a high vulnerability (CVSS 7.2) in Kerio Personal Firewall, published December 31, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.56%, the 46th percentile. No source names a fixed version.
References
securityfocus.com/bid/9525
exchange.xforce.ibmcloud.com/vulnerabilities/14981
tuneld.com/news?id=30
securitytracker.com/alerts/2004/Jan/1008870.html
osvdb.org/3748
secunia.com/advisories/10746
nvd.nist.gov/vuln/detail/CVE-2004-2329
github.com/advisories/GHSA-647w-cx37-q2h4
