CVE-2007-6385

The proxy server in Kerio WinRoute Firewall before 6.4.1 does not properly enforce authentication for HTTPS pages, which has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries.

• kerio winroute firewall (<= 6.4.0) • kerio winroute firewall 5.0.1 • kerio winroute firewall 5.0.2 • kerio winroute firewall 5.0.3 • kerio winroute firewall 5.0.4 • kerio winroute firewall 5.0.5 • kerio winroute firewall 5.0.6 • kerio winroute firewall 5.0.7 • kerio winroute firewall 5.0.8 • kerio winroute firewall 5.0.9 • kerio winroute firewall 5.1 • kerio winroute firewall 5.1.1 • kerio winroute firewall 5.1.2 • kerio winroute firewall 5.1.3 • kerio winroute firewall 5.1.4 • kerio winroute firewall 5.1.5 • kerio winroute firewall 5.1.6 • kerio winroute firewall 5.1.7 • kerio winroute firewall 5.1.8 • kerio winroute firewall 5.1.9 • kerio winroute firewall 5.1.10 • kerio winroute firewall 5.10 • kerio winroute firewall 6.0 • kerio winroute firewall 6.0.1 • kerio winroute firewall 6.0.2 • kerio winroute firewall 6.0.3 • kerio winroute firewall 6.0.4 • kerio winroute firewall 6.0.5 • kerio winroute firewall 6.0.6 • kerio winroute firewall 6.0.7 • kerio winroute firewall 6.0.8 • kerio winroute firewall 6.0.9 • kerio winroute firewall 6.0.11 • kerio winroute firewall 6.1 • kerio winroute firewall 6.1.1 • kerio winroute firewall 6.1.2 • kerio winroute firewall 6.1.3 • kerio winroute firewall 6.1.4 • kerio winroute firewall 6.1.4 patch 1 • kerio winroute firewall 6.1.4 patch 2 • kerio winroute firewall 6.2 • kerio winroute firewall 6.2.1 • kerio winroute firewall 6.2.2 • kerio winroute firewall 6.2.3 • kerio winroute firewall 6.3.0 • kerio winroute firewall 6.3.1