Lucene search
HistoryDec 31, 2004 - 5:00 a.m.
CVE-2004-2483
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
6.6 Medium
AI Score
Confidence
High
0.021 Low
EPSS
Percentile
89.4%
Kerio WinRoute Firewall before 6.0.9 uses information from PTR queries in response to A queries, which allows remote attackers to poison the DNS cache or cause a denial of service (connection loss).
Affected configurations
Node
keriowinroute_firewallMatch6.0
ORkeriowinroute_firewallMatch6.0.1
ORkeriowinroute_firewallMatch6.0.2
ORkeriowinroute_firewallMatch6.0.3
ORkeriowinroute_firewallMatch6.0.4
ORkeriowinroute_firewallMatch6.0.5
ORkeriowinroute_firewallMatch6.0.6
ORkeriowinroute_firewallMatch6.0.7
ORkeriowinroute_firewallMatch6.0.8
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
6.6 Medium
AI Score
Confidence
High
0.021 Low
EPSS
Percentile
89.4%
Related for NVD:CVE-2004-2483