CVE-2004-1023

CVE-2004-1023 describes a local privilege escalation vulnerability affecting Kerio Winroute Firewall, ServerFirewall, and MailServer on Windows systems. The flaw stems from improper Access Control List (ACL) configurations on critical files, allowing local users with Power User privileges to modify program files, inject malicious DLLs, and alter configuration XML files. With a CVSS score of 2.1, this vulnerability is considered low severity, requiring local access and user interaction for exploitation, primarily impacting integrity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or media coverage, though it has garnered significant community discussion on GitHub.