Bug in Jetico Personal Firewall

From: elaich (a_at_b.c)
Date: 11/29/04 

Date: 29 Nov 2004 01:40:11 GMT

Well, it will not work at all for me. I'm running WinME and was using Kerio
2.1.5. After reading of the fragmented packet exploit, I decided to try
other options.

I use PeoplePC ISP. Jetico will not allow the dialer to connect to verify
the password. Yet, there is no evidence of any traffic, and the firewall
does not prompt me for permission. What it does do is cause a BSOD. It does
so even when turned off.

After uninstalling it, things are back to normal.

Relevant Pages

  • Re: Kerio 2.1.5 vs. Kerio 4xx
    ... >to mean all versions of Kerio, including 2.x, but it could also just mean prior ... I've tested 2.1.5 and it let through every fragmented packet I sent ... Jetico and XP firewall SP2 were also tested but not found to be ... vulnerability people are dubious. ...
    (comp.security.firewalls)
  • Re: Huge security hole in Kerio 2.1.5
    ... which doesn't suffer from the fragmented packet ... > Your tone suggests that you know of some problems with EZ Firewall ... issue, but a Kerio problem. ...
    (comp.security.firewalls)
  • Re: Kerio 2.1.5 vs. Kerio 4xx
    ... >>subject to the recently mentioned fragmented packet exploit. ... >>that it lets fragmented packets thru the firewall without logging or ... >>otherwise blocking them. ... > to mean all versions of Kerio, including 2.x, but it could also just mean prior ...
    (comp.security.firewalls)
  • Re: Kerio 2.1.5 vs. Kerio 4xx
    ... >subject to the recently mentioned fragmented packet exploit. ... >otherwise blocking them. ... but I haven't seen anything definitive about Kerio ... to mean all versions of Kerio, including 2.x, but it could also just mean prior ...
    (comp.security.firewalls)
  • Re: attn sponge - kerio bsod problem
    ... Running WinMe & Kerio 2.14...I have no "fwdrv.sys" on the hd. ... Outgoing mail is certified Virus Free. ... Checked by AVG anti-virus system. ...
    (comp.security.firewalls)