CVE-2005-1062

The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to quickly obtain passwords that are 5 characters or less via brute force methods...

CVE-2005-1063

The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to cause a denial of service CPU consumption via certain attacks that force the product to "compute unexpected conditions" and "perform...

CVE-2005-1062

Kerio’s administration protocol in Kerio WinRoute Firewall <= 6.0.10, Kerio Personal Firewall <= 4.1.2, and Kerio MailServer

CVE-2005-1063

The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to cause a denial of service CPU consumption via certain attacks that force the product to "compute unexpected conditions" and "perform...

CVE-2005-1063

Kerio’s CVE-2005-1063 affects Kerio WinRoute Firewall (up to 6.0.10), Kerio Personal Firewall (up to 4.1.2), and Kerio MailServer (up to 6.0.8). The issue arises from abusing the administration protocol, allowing remote attackers to cause a CPU-consuming denial of service by triggering pre-authen...

CVE-2005-1062: Undefined Security Weakness

The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to quickly obtain passwords that are 5 characters or less via brute force methods...

CVE-2005-1063: Undefined Security Weakness

The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to cause a denial of service CPU consumption via certain attacks that force the product to "compute unexpected conditions" and "perform...

CVE-2004-1022

Kerio Winroute Firewall before 6.0.7, ServerFirewall before 1.0.1, and MailServer before 6.0.5 use symmetric encryption for user passwords, which allows attackers to decrypt the user database and obtain the passwords by extracting the secret key from within the software...

CVE-2004-1023

Kerio Winroute Firewall before 6.0.9, ServerFirewall before 1.0.1, and MailServer before 6.0.5, when installed on Windows based systems, do not modify the ACLs for critical files, which allows local users with Power Users privileges to modify programs, install malicious DLLs in the plug-ins folde...

CVE-2004-2483

Kerio WinRoute Firewall before 6.0.9 uses information from PTR queries in response to A queries, which allows remote attackers to poison the DNS cache or cause a denial of service connection loss...

CVE-2004-1023

Kerio Winroute Firewall before 6.0.9, ServerFirewall before 1.0.1, and MailServer before 6.0.5, when installed on Windows based systems, do not modify the ACLs for critical files, which allows local users with Power Users privileges to modify programs, install malicious DLLs in the plug-ins folde...

CVE-2004-1022

Kerio Winroute Firewall before 6.0.7, ServerFirewall before 1.0.1, and MailServer before 6.0.5 use symmetric encryption for user passwords, which allows attackers to decrypt the user database and obtain the passwords by extracting the secret key from within the software...

CVE-2004-1023

Affected software: Kerio Winroute Firewall (<6.0.9), ServerFirewall (<1.0.1), and MailServer (

CVE-2004-1022

Kerio products Kerio WinRoute Firewall (before 6.0.7), ServerFirewall (before 1.0.1), and MailServer (before 6.0.5) store passwords using a symmetric encryption scheme. The vulnerability arises because the secret key is extractable from the software, enabling an attacker to decrypt the user datab...

CVE-2004-1022: Undefined Security Weakness

Kerio Winroute Firewall before 6.0.7, ServerFirewall before 1.0.1, and MailServer before 6.0.5 use symmetric encryption for user passwords, which allows attackers to decrypt the user database and obtain the passwords by extracting the secret key from within the software...

CVE-2004-1023: Undefined Security Weakness

Kerio Winroute Firewall before 6.0.9, ServerFirewall before 1.0.1, and MailServer before 6.0.5, when installed on Windows based systems, do not modify the ACLs for critical files, which allows local users with Power Users privileges to modify programs, install malicious DLLs in the plug-ins folde...

WinRoute Proxy Detection

Binary data 1102.prm...

[securitylab.ru & security.nnov] Kerio Winroute Firewall Xroxy problem

Application: Kerio Winroute Firewall 5.10 Vendor: Kerio Technologies Inc. Vendor Site: http://www.kerio.com Remote: Yes Exploitable: Yes Risk level: Critical if proxy requires authentication Authors: Alexander Antipov & 3APA3A aka Pig Killer Authors Sites: http://www.securitylab.ru...

Positive Technologies Security Advisory 2003-0307: DoS-attack in Kerio WinRoute Firewall

Positive Technologies Security Advisory http://www.ptsecurity.com Title: DoS-attack in Kerio WinRoute Firewall Date: March, 07 2003 Severity: High Application: Kerio WinRoute Firewall 5.0.1 Platform: Windows 95/98/ME/NT/2000/XP Vendor Status: Notified, patched in version 5.0.2 I. DESCRIPTION...

CVE-1999-0471

The CVE-1999-0471 entry concerns Winroute’s remote proxy server, where an unauthenticated attacker can reconfigure the proxy through the "cancel" button. The PT-1999-1152 PTSecurity page confirms the issue but does not specify affected versions or a fix. Other sources reiterate that the vulnerabi...