473 matches found
CVE-2006-6131
Untrusted search path vulnerability in 1 WSAdminServer and 2 WSWebServer in Kerio WebSTAR 4D WebSTAR Server Suite 5.4.2 and earlier allows local users with webstar privileges to gain root privileges via a malicious libucache.dylib helper library in the current working directory...
Kerio WinRoute防火墙DNS响应拒绝服务漏洞
Kerio WinRoute Firewall是适用于中小企业的网关防火墙。 Kerio WinRoute防火墙在处理畸形的DNS响应报文时存在漏洞，远程攻击者可能利用此漏洞导致防火墙崩溃。 Kerio WinRoute Firewall 6.2.3 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kerio.com/...
Kerio WebStar本地权限提升漏洞
Kerio WebSTAR是运行在Mac OS X平台上的WEB服务器。 Kerio WebSTAR在不安全的权限安装程序文件，本地攻击者可能利用此提升自己的权限。 在安装Kerio WebSTAR时/Applications中继承了两个setuid二进制程序： kevin-finisterres-computer:/Desktop kf$ find /Applications/Kerio\ WebSTAR -perm -4000 -ls 978790 3016 -rwsrwx--x 1 root admin 1542556 Apr 10 2006 /Applications/Kerio...
Exploits Kerio WebStar libucache.dylib privilege escalation
No description provided by source. !/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom you must have access to the webstar user or be in the admin group This is currently not patched... chmod -s your kerio binaries foreach $key keys %ENV delete $ENV$key;...
kerio_WebSTAR_pwn.pl.txt
!/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom you must have access to the webstar user or be in the admin group This is currently not patched... chmod -s your kerio binaries foreach $key keys %ENV delete $ENV$key; $tgts"0" = "kerio-webstar-5.4.2-mac.bi...
[Full-disclosure] Kerio WebSTAR local privilege escalation
DMA2006-1115a - 'Kerio WebSTAR local privilege escalation' Author: Kevin Finisterre Vendors: http://www.kerio.com/webstarhome.html Product: 'Kerio WebSTAR = 5.4.2 ?' References: http://www.digitalmunition.com/DMA2006-1115a.txt Description: Kerio WebSTAR is an easy-to-use web server for Mac OS X...
Kerio Webstar privilege escalation
Suid application loads library from current directory...
Kerio WebSTAR 5.4.2 (libucache.dylib) Privilege Escalation Exploit (OSX)
No description provided by source. !/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom you must have access to the webstar user or be in the admin group This is currently not patched... chmod -s your kerio binaries foreach $key keys %ENV delete $ENV$key;...
Kerio WebSTAR 5.4.2 (OSX) - libucache.dylib Local Privilege Escalation
Kerio WebSTAR 5.4.2 OSX - libucache.dylib Local Privilege Escalation !/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom you must have access to the webstar user or be in the admin group This is currently not patched... chmod -s your kerio binaries foreach...
Kerio WebSTAR 5.4.2 (libucache.dylib) Privilege Escalation Exploit (OSX)
Exploit for macOS platform in category local exploits ======================================================================== Kerio WebSTAR 5.4.2 libucache.dylib Privilege Escalation Exploit OSX ======================================================================== !/usr/bin/perl...
Kerio MailServer 5.x/6.x - Remote LDAP Denial of Service
source: https://www.securityfocus.com/bid/21091/info Kerio MailServer is prone to a denial-of-service vulnerability due to a flaw when handling malformed network traffic. Successful exploits will result in denial-of-service conditions. !/usr/bin/env python kms1.py - Kerio MailServer 6.2.2 preauth...
Kerio WebSTAR 5.4.2 (OSX) - 'libucache.dylib' Local Privilege Escalation
!/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom you must have access to the webstar user or be in the admin group This is currently not patched... chmod -s your kerio binaries foreach $key keys %ENV delete $ENV$key; $tgts"0" = "kerio-webstar-5.4.2-mac.bi...
Kerio MailServer 5.x6.x - Remote LDAP Denial of Service
Kerio MailServer 5.x6.x - Remote LDAP Denial of Service source: https://www.securityfocus.com/bid/21091/info Kerio MailServer is prone to a denial-of-service vulnerability due to a flaw when handling malformed network traffic. Successful exploits will result in denial-of-service conditions...
CVE-2006-5812
Unspecified vulnerability in Kerio MailServer allows attackers to cause a denial of service, as demonstrated by vdkms4.pm, a "Kerio MailServer DoS." NOTE: As of 20061108, this disclosure has no actionable information. However, since it is from a reliable researcher, it is being assigned a CVE...
CVE-2006-5812
CVE-2006-5812 concerns an unspecified vulnerability in Kerio MailServer that allows denial of service, demonstrated by vd_kms4.pm. The initial disclosure notes no actionable information as of 20061108, and the connected documents provide no concrete exploit details or fixes. No remediation detail...
CVE-2006-5812
Unspecified vulnerability in Kerio MailServer allows attackers to cause a denial of service, as demonstrated by vdkms4.pm, a "Kerio MailServer DoS." NOTE: As of 20061108, this disclosure has no actionable information. However, since it is from a reliable researcher, it is being assigned a CVE...
Sunbelt Kerio个人防火墙多个本地拒绝服务漏洞
Sunbelt Kerio个人防火墙是一个简单的基于规则设置的防火墙安全防护软件。 Sunbelt Kerio在处理挂接系统调用时存在漏洞，本地攻击者可能利用此漏洞导致系统崩溃。 Sunbelt Kerio个人防火墙hook了SSDT中的很多函数，其中至少有6种情况可能没有验证用户模式的参数。由于fwdrv.sys和khips.sys驱动中的错误，如果使用无效参数值调用了NtCreateFile、NtDeleteFile、NtLoadDriver、NtMapViewOfSection、NtOpenFile或NtSetInformationFile的话，就会导致系统崩溃。 Sunbelt...
Kerio Personal Firewall 2.1.4 Remote Code Execution Exploit
No description provided by source. / Kerio Personal Firewall v2.1.4 remote code execution exploit Tested on Windows XP with SP1 In order to exploit, for ease of mind, set the firewall to permit all traffic, or allow a connection to port 44334 from your testing unix shell ip. It is also possible t...
Kerio MailServer 5.6.3 Remote Buffer Overflow Exploit
No description provided by source. / Remote Buffer Overflow Exploit for Kerio MailServer 5.6.3 / / ========================================= / / By B-r00t / / / / In response to the Kerio Mailserver vulnerabilities / / discovered by David F.Madrid. / / / / Although this exploit requires valid...