Lucene search

[email protected]CVE-2005-1062

HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-1062

2005-05-0204:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

kerio winroute firewall

personal firewall

mailserver

brute force

remote attack

password security

cve-2005-1062

6.9 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.01 Low

EPSS

Percentile

83.6%

JSON

The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to quickly obtain passwords that are 5 characters or less via brute force methods.

CPENameOperatorVersion
kerio:personal_firewallkerio personal firewalleq4.1.0
kerio:personal_firewallkerio personal firewalleq4.0.12
kerio:winroute_firewallkerio winroute firewalleq6.0.1
kerio:winroute_firewallkerio winroute firewalleq6.0.4
kerio:kerio_mailserverkerio kerio mailservereq6.0.7
kerio:winroute_firewallkerio winroute firewalleq6.0.3
kerio:winroute_firewallkerio winroute firewalleq6.0.9
kerio:personal_firewallkerio personal firewalleq4.0.13
kerio:winroute_firewallkerio winroute firewalleq6.0.6
kerio:kerio_mailserverkerio kerio mailservereq6.0.6

CPE	Name	Operator	Version
kerio:personal_firewall	kerio personal firewall	eq	4.1.0
kerio:personal_firewall	kerio personal firewall	eq	4.0.12
kerio:winroute_firewall	kerio winroute firewall	eq	6.0.1
kerio:winroute_firewall	kerio winroute firewall	eq	6.0.4
kerio:kerio_mailserver	kerio kerio mailserver	eq	6.0.7
kerio:winroute_firewall	kerio winroute firewall	eq	6.0.3
kerio:winroute_firewall	kerio winroute firewall	eq	6.0.9
kerio:personal_firewall	kerio personal firewall	eq	4.0.13
kerio:winroute_firewall	kerio winroute firewall	eq	6.0.6
kerio:kerio_mailserver	kerio kerio mailserver	eq	6.0.6

Rows per page:

1-10 of 331

References

research.tic.udc.es/scg/advisories/20050429-1.txt

www.kerio.com/security_advisory.html

www.securityfocus.com/archive/1/397221

6.9 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.01 Low

EPSS

Percentile

83.6%

JSON

Related for CVE-2005-1062

cvelist1 securityvulns1 openvas1