← Database

CVE-2003-1491

HIGH CVSS: 7.5 Published: 2003-12-31 Modified: 2026-06-16

Description

Kerio Personal Firewall (KPF) 2.1.4 has a default rule to accept incoming packets from DNS (UDP port 53), which allows remote attackers to bypass the firewall filters via packets with a source port of 53.

Affected Platforms

Kerio Personal Firewall

Weakness Type

CWE-16, CWE-94

References