CVE-2005-0964: Unknown vulnerability in Kerio Personal Firewall 4.1.2 and earlier allows local users to bypass firewall ru...

Security readout for executives and security teams

This CVE describes a local bypass of Kerio Personal Firewall rules. A malicious process could impersonate a trusted or less-restricted legitimate process, causing firewall policy to be applied incorrectly. The business risk is mainly on legacy endpoints still running this old personal firewall product. Exposure is likely limited to legacy systems running Kerio Personal Firewall 4.1.2 or earlier. Modern environments are unlikely to be affected unless old endpoint images, lab systems, or unsupported desktops still use this product. Treat this as a legacy exposure cleanup item unless affected systems are found. Priority rises if the product protects sensitive endpoints or systems where local users can run untrusted software. Mitigation focus: Inventory endpoints for Kerio Personal Firewall 4.1.2 or earlier.; Check Kerio’s advisory for the vendor-supported fix or replacement guidance.; Retire unsupported Kerio Personal Firewall installations where possible..

Prepared

Jun 29, 2026, 22:58 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.