[SA18542] Kerio WinRoute Firewall Denial of Service Vulnerabilities

TITLE: Kerio WinRoute Firewall Denial of Service Vulnerabilities SECUNIA ADVISORY ID: SA18542 VERIFY ADVISORY: http://secunia.com/advisories/18542/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Kerio WinRoute Firewall 6.x http://secunia.com/product/3613/ DESCRIPTION: Two...

CVE-2005-4425

Unspecified vulnerability in Kerio WinRoute Firewall before 6.1.3 allows remote attackers to cause a denial of service crash via certain RTSP streams...

CVE-2005-4425

Kerio WinRoute Firewall prior to version 6.1.3 is affected by a vulnerability that allows remote attackers to cause a denial of service (crash) via certain RTSP streams. The issue appears in the version range before 6.1.3; exact root cause is not detailed in the provided documents. Public referen...

CVE-2005-4425

Unspecified vulnerability in Kerio WinRoute Firewall before 6.1.3 allows remote attackers to cause a denial of service crash via certain RTSP streams...

CVE-2005-4425: Undefined Security Weakness

Unspecified vulnerability in Kerio WinRoute Firewall before 6.1.3 allows remote attackers to cause a denial of service crash via certain RTSP streams...

CVE-2005-4157

Unspecified vulnerability in Kerio WinRoute Firewall before 6.1.3 allows remote attackers to authenticate to the service using an account that has been disabled...

CVE-2005-4157

CVE-2005-4157 concerns Kerio WinRoute Firewall prior to 6.1.3. The vulnerability, described in the public records, allows remote attackers to authenticate to the service using an account that has been disabled, indicating an authentication bypass/weak access control issue. The NVD entry assigns a...

CVE-2005-4157

Unspecified vulnerability in Kerio WinRoute Firewall before 6.1.3 allows remote attackers to authenticate to the service using an account that has been disabled...

CVE-2005-4157: Undefined Security Weakness

Unspecified vulnerability in Kerio WinRoute Firewall before 6.1.3 allows remote attackers to authenticate to the service using an account that has been disabled...

Kerio WinRoute Firewall HTTP/HTTPS Management Detection

The remote host appears to be running the Kerio WinRoute Firewall application. It is possible to access the HTTP or HTTPS management interface on the host. Script Written By Ferdy Riphagen Script distributed under the GNU GPLv2 License. Changes by Tenable : - Improved version extraction - Report...

Multiple Kerio WinRoute Firewall vulnerabilities

Crash on RTSP streams processing, possibility to use disabled account...

[SA17519] Kerio WinRoute Firewall Potential Denial of Service and Security Bypass

TITLE: Kerio WinRoute Firewall Potential Denial of Service and Security Bypass SECUNIA ADVISORY ID: SA17519 VERIFY ADVISORY: http://secunia.com/advisories/17519/ CRITICAL: Less critical IMPACT: Security Bypass, DoS WHERE: From remote SOFTWARE: Kerio WinRoute Firewall 6.x...

Kerio Winroute Firewall Admin Service

The administrative interface of a personal firewall is listening on the remote port. The remote host appears to be running Kerio Winroute Firewall Admin service. SPDX-FileCopyrightText: 2005 Javier Munoz Mellid Some text descriptions might be excerpted from a referenced sources, and are Copyright...

CVE-2004-2483

Technical details about CVE-2004-2483 are not publicly available in the supplied documents; monitor for updates from official advisories. The provided references reiterate impact but do not add new specifics.

CVE-2004-2483

Kerio WinRoute Firewall before 6.0.9 uses information from PTR queries in response to A queries, which allows remote attackers to poison the DNS cache or cause a denial of service connection loss...

CVE-2004-2483: Undefined Security Weakness

Kerio WinRoute Firewall before 6.0.9 uses information from PTR queries in response to A queries, which allows remote attackers to poison the DNS cache or cause a denial of service connection loss...

CVE-2005-1062

The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to quickly obtain passwords that are 5 characters or less via brute force methods...

Kerio Winroute Firewall Admin Service Detection

The remote host appears to be running Kerio Winroute Firewall Admin service. It is recommended to block incoming traffic to this port. Also, make sure the use of this software matches your corporate security policy. Copyright C 2005 Secure Computer Group. University of A Coruna This script was...

Multiple Kerio WinRoute Firewall, Kerio Personal Firewall and Kerio MailServer administration protocol vulnerabilities

Password bruteforcing, DoS...

[CAN-2005-1063] Administration protocol abuse leads to Service and System Denial of Service

Secure Computer Group - University of A Coruna http://research.tic.udc.es/scg/ -- x -- dotpi.com Information Technologies Research Labs http://www.dotpi.com ID: 20050429-2 Document title: Administration protocol abuse leads to Service and System Denial of Service Document revision: 1.0 Coordinate...