CVEvulnerability
CVE-2005-1062
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-05-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to quickly obtain passwords that are 5 characters or less via brute force methods.
Affected configurations
• kerio kerio mailserver 6.0.0
• kerio kerio mailserver 6.0.1
• kerio kerio mailserver 6.0.2
• kerio kerio mailserver 6.0.3
• kerio kerio mailserver 6.0.4
• kerio kerio mailserver 6.0.5
• kerio kerio mailserver 6.0.6
• kerio kerio mailserver 6.0.7
• kerio kerio mailserver 6.0.8
• kerio personal firewall 4.0.7
• kerio personal firewall 4.0.8
• kerio personal firewall 4.0.9
• kerio personal firewall 4.0.10
• kerio personal firewall 4.0.11
• kerio personal firewall 4.0.12
• kerio personal firewall 4.0.13
• kerio personal firewall 4.0.14
• kerio personal firewall 4.0.15
• kerio personal firewall 4.0.16
• kerio personal firewall 4.1.0
• kerio personal firewall 4.1.1
• kerio personal firewall 4.1.2
• kerio winroute firewall 6.0.0
• kerio winroute firewall 6.0.1
• kerio winroute firewall 6.0.2
• kerio winroute firewall 6.0.3
• kerio winroute firewall 6.0.4
• kerio winroute firewall 6.0.5
• kerio winroute firewall 6.0.6
• kerio winroute firewall 6.0.7
• kerio winroute firewall 6.0.8
• kerio winroute firewall 6.0.9
• kerio winroute firewall 6.0.10
References
- http://research.tic.udc.es/scg/advisories/20050429-1.txt research.tic.udc.es
- http://www.kerio.com/security_advisory.html Vendor Advisory
- http://www.securityfocus.com/archive/1/397221 www.securityfocus.com
- http://research.tic.udc.es/scg/advisories/20050429-1.txt research.tic.udc.es
- http://www.kerio.com/security_advisory.html Vendor Advisory
- http://www.securityfocus.com/archive/1/397221 www.securityfocus.com