Lucene search
HistoryAug 21, 2005 - 4:00 a.m.
CVE-2004-2483
kerio winroute firewall
cve-2004-2483
dns cache poisoning
denial of service
information security
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
7 High
AI Score
Confidence
High
0.021 Low
EPSS
Percentile
89.4%
Kerio WinRoute Firewall before 6.0.9 uses information from PTR queries in response to A queries, which allows remote attackers to poison the DNS cache or cause a denial of service (connection loss).
Affected configurations
Node
keriowinroute_firewallMatch6.0
ORkeriowinroute_firewallMatch6.0.1
ORkeriowinroute_firewallMatch6.0.2
ORkeriowinroute_firewallMatch6.0.3
ORkeriowinroute_firewallMatch6.0.4
ORkeriowinroute_firewallMatch6.0.5
ORkeriowinroute_firewallMatch6.0.6
ORkeriowinroute_firewallMatch6.0.7
ORkeriowinroute_firewallMatch6.0.8
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
7 High
AI Score
Confidence
High
0.021 Low
EPSS
Percentile
89.4%
Related for CVE-2004-2483