CVE-2003-0220: Kerio Personal Firewall 2

High severity, CVSS 7.5. EPSS: 69.1% chance of exploitation in the next 30 days.

Buffer overflow in the administrator authentication process for Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to execute arbitrary code via a handshake packet.

Affected products

• Kerio Personal Firewall 2: version 2.1 only; version 2.1.1 only; version 2.1.2 only; version 2.1.3 only; version 2.1.4 only

Published 2003-05-12. Last modified 2026-06-16.