CVEvulnerability

CVE-2005-1062

7.5 HIGH Published 2005-05-02 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-05-02
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to quickly obtain passwords that are 5 characters or less via brute force methods.

Affected configurations

• kerio kerio mailserver 6.0.0 • kerio kerio mailserver 6.0.1 • kerio kerio mailserver 6.0.2 • kerio kerio mailserver 6.0.3 • kerio kerio mailserver 6.0.4 • kerio kerio mailserver 6.0.5 • kerio kerio mailserver 6.0.6 • kerio kerio mailserver 6.0.7 • kerio kerio mailserver 6.0.8 • kerio personal firewall 4.0.7 • kerio personal firewall 4.0.8 • kerio personal firewall 4.0.9 • kerio personal firewall 4.0.10 • kerio personal firewall 4.0.11 • kerio personal firewall 4.0.12 • kerio personal firewall 4.0.13 • kerio personal firewall 4.0.14 • kerio personal firewall 4.0.15 • kerio personal firewall 4.0.16 • kerio personal firewall 4.1.0 • kerio personal firewall 4.1.1 • kerio personal firewall 4.1.2 • kerio winroute firewall 6.0.0 • kerio winroute firewall 6.0.1 • kerio winroute firewall 6.0.2 • kerio winroute firewall 6.0.3 • kerio winroute firewall 6.0.4 • kerio winroute firewall 6.0.5 • kerio winroute firewall 6.0.6 • kerio winroute firewall 6.0.7 • kerio winroute firewall 6.0.8 • kerio winroute firewall 6.0.9 • kerio winroute firewall 6.0.10

References