Kerio Winroute Firewall Admin Service

The administrative interface of a personal firewall is listening on the remote port. The remote host appears to be running Kerio Winroute Firewall Admin service. SPDX-FileCopyrightText: 2005 Javier Munoz Mellid Some text descriptions might be excerpted from a referenced sources, and are Copyright...

Kerio Mailserver Admin Service

The remote host appears to be running the Kerio Admin MailServer Admin Service on this port. SPDX-FileCopyrightText: 2005 Javier Munoz Mellid Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2005-3286

The FWDRV driver in Kerio Personal Firewall 4.2 and Server Firewall 1.1.1 allows local users to cause a denial of service crash by setting the PAGENOACCESS or PAGEGUARD protection on the Page Environment Block PEB, which triggers an exception, aka the "PEB lockout vulnerability."...

CVE-2005-3286

The FWDRV driver in Kerio Personal Firewall 4.2 and Server Firewall 1.1.1 allows local users to cause a denial of service crash by setting the PAGENOACCESS or PAGEGUARD protection on the Page Environment Block PEB, which triggers an exception, aka the "PEB lockout vulnerability."...

CVE-2005-3286

The CVE-2005-3286 entry affects Kerio Personal Firewall 4.2 and Kerio Server Firewall 1.1.1, where the FWDRV driver allows local attackers to trigger a denial of service (crash) by manipulating the Page Environment Block (PEB) protection to PAGE_NOACCESS or PAGE_GUARD, causing an exception (the s...

Kerio Firewall DoS

DoS on executable application's PEB parsing...

CVE-2004-2483

Technical details about CVE-2004-2483 are not publicly available in the supplied documents; monitor for updates from official advisories. The provided references reiterate impact but do not add new specifics.

CVE-2004-2483

Kerio WinRoute Firewall before 6.0.9 uses information from PTR queries in response to A queries, which allows remote attackers to poison the DNS cache or cause a denial of service connection loss...

CVE-2004-2441

Kerio MailServer

CVE-2004-2441

Unspecified vulnerability in Kerio MailServer before 6.0.3 has unknown impact and unknown remote attack vectors, related to a "potential security issue."...

CVE-2004-2329

Kerio Personal Firewall KPF 2.1.5 allows local users to execute arbitrary code with SYSTEM privileges via the Load button in the Firewall Configuration Files option, which does not drop privileges before opening the file loading dialog box...

CVE-2004-2329

Kerio Personal Firewall 2.1.5 is vulnerable to local privilege escalation: when loading firewall configuration files, the Load button opens a file dialog without dropping privileges, allowing a local user to execute arbitrary code with SYSTEM privileges. Affected component: firewall configuration...

Kerio MailServer < 6.0.10 Multiple Mail Handling DoS

According to its banner, the remote host is running a version of Kerio MailServer prior to 6.0.10. In those versions, crashes can occur when downloading certain email messages in IMAP or Outlook with Kerio Outlook Connector KOC or, under Linux, when parsing email messages with multiple embedded...

Kerio MailServer DoS

WebMail vulnerability leads to 100 CPU exhaustion. Crash on multiple attached .eml files, DoS with IMAP and Outlook Connectors...

[SA15360] Kerio MailServer Two Denial of Service Vulnerabilities

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Kerio MailServer Two Denial of Service Vulnerabilities...

CVE-2004-1907

The Web Filtering functionality in Kerio Personal Firewall KPF 4.0.13 allows remote attackers to cause a denial of service crash by sending hex-encoded URLs containing "%13%12%13"...

CVE-2004-1907

The vulnerability CVE-2004-1907 affects Kerio Personal Firewall (KPF) 4.0.13, where the Web Filtering functionality can be triggered to crash a remote system by receiving hex-encoded URLs containing %13%12%13. This results in a denial-of-service condition. The available data do not specify an off...

CVE-2005-0964

Unknown vulnerability in Kerio Personal Firewall 4.1.2 and earlier allows local users to bypass firewall rules via a malicious process that impersonates a legitimate process that has fewer restrictions...

CVE-2005-1062

The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to quickly obtain passwords that are 5 characters or less via brute force methods...

Kerio Winroute Firewall Admin Service Detection

The remote host appears to be running Kerio Winroute Firewall Admin service. It is recommended to block incoming traffic to this port. Also, make sure the use of this software matches your corporate security policy. Copyright C 2005 Secure Computer Group. University of A Coruna This script was...