Petr Matousek has reported a vulnerability in Kerio Personal Firewall, which can be exploited by malicious programs to bypass the firewall rules.

The vulnerability is caused due to an error making it possible for a malicious process to bypass the firewall network rules by impersonating another process allowed to access the Internet.

Successful exploitation requires that a malicious program has been executed on the user's system.

The vulnerability affects versions 4.1.2 and prior.

Solution
Update to version 4.1.3.

Provided and/or discovered by
Petr Matousek

Changelog
Further details available in Customer Area

Original Advisory
Kerio:
http://www.kerio.com/security_advisory.html#0503

Deep Links
Links available in Customer Area