Lucene search
+L

473 matches found

Tenable Nessus
Tenable Nessus
added 2005/05/02 12:00 a.m.20 views

Kerio Mailserver Admin Service Detection

The remote host appears to be running the Kerio Admin MailServer Admin Service on this port. Copyright C 2005 Secure Computer Group. University of A Coruna This script was written by Javier Munoz Mellid This script is released under the GNU GPL v2 Changes by Tenable: - Revised plugin title, remov...

5.5AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2005/05/02 12:00 a.m.13 views

Kerio Personal Firewall Admin Service Detection

The remote host appears to be running the Kerio Personal Firewall Admin service on this port. It is recommended that this port is not reachable from the outside. Also, make sure that the use of this software is done in accordance with your corporate security policy. Copyright C 2005 Secure Comput...

5.5AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2005/05/02 12:00 a.m.27 views

Kerio MailServer < 6.0.10 Unspecified Admin Web Interface DoS

Binary data 2873.prm...

7.5CVSS7.3AI score0.02555EPSS
SaveExploits0References3
securityvulns
securityvulns
added 2005/05/01 12:00 a.m.32 views

Multiple Kerio WinRoute Firewall, Kerio Personal Firewall and Kerio MailServer administration protocol vulnerabilities

Password bruteforcing, DoS...

3.8AI score
SaveExploits0References2Affected Software3
securityvulns
securityvulns
added 2005/04/30 12:00 a.m.51 views

[CAN-2005-1062] Administration protocol abuse allows local/remote password cracking

Secure Computer Group - University of A Coruna http://research.tic.udc.es/scg/ -- x -- dotpi.com Information Technologies Research Labs http://www.dotpi.com ID: 20050429-1 Document title: Administration protocol abuse allows local/remote password cracking Document revision: 1.0 Coordinated releas...

7.5CVSS0.02555EPSS
SaveExploits0
securityvulns
securityvulns
added 2005/04/30 12:00 a.m.46 views

[CAN-2005-1063] Administration protocol abuse leads to Service and System Denial of Service

Secure Computer Group - University of A Coruna http://research.tic.udc.es/scg/ -- x -- dotpi.com Information Technologies Research Labs http://www.dotpi.com ID: 20050429-2 Document title: Administration protocol abuse leads to Service and System Denial of Service Document revision: 1.0 Coordinate...

5CVSS0.4AI score0.01574EPSS
SaveExploits0
Cvelist
Cvelist
added 2005/04/29 4:00 a.m.38 views

CVE-2005-1062

The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to quickly obtain passwords that are 5 characters or less via brute force methods...

6.8AI score0.02555EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2005/04/29 4:00 a.m.41 views

CVE-2005-1063

The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to cause a denial of service CPU consumption via certain attacks that force the product to "compute unexpected conditions" and "perform...

6.7AI score0.01574EPSS
SaveExploits0References3
CVE
CVE
added 2005/04/29 4:00 a.m.64 views

CVE-2005-1062

Kerio’s administration protocol in Kerio WinRoute Firewall &lt;= 6.0.10, Kerio Personal Firewall &lt;= 4.1.2, and Kerio MailServer

7.5CVSS6.8AI score0.02555EPSS
SaveExploits0References3Affected Software3
CVE
CVE
added 2005/04/29 4:00 a.m.65 views

CVE-2005-1063

Kerio’s CVE-2005-1063 affects Kerio WinRoute Firewall (up to 6.0.10), Kerio Personal Firewall (up to 4.1.2), and Kerio MailServer (up to 6.0.8). The issue arises from abusing the administration protocol, allowing remote attackers to cause a CPU-consuming denial of service by triggering pre-authen...

5CVSS6.7AI score0.01574EPSS
SaveExploits0References3Affected Software3
NVD
NVD
added 2005/04/29 4:00 a.m.25 views

CVE-2005-1063

The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to cause a denial of service CPU consumption via certain attacks that force the product to "compute unexpected conditions" and "perform...

5CVSS6.7AI score0.01574EPSS
SaveExploits0References3
NVD
NVD
added 2005/04/18 4:00 a.m.21 views

CVE-2005-1138

Unknown vulnerability in WebMail in Kerio MailServer before 6.0.9 allows remote attackers to cause a denial of service CPU consumption via certain e-mail messages...

5CVSS6.6AI score0.01227EPSS
SaveExploits0References2
securityvulns
securityvulns
added 2005/04/18 12:00 a.m.42 views

[SA14943] Kerio MailServer Unspecified WebMail Email Viewing Denial of Service

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Kerio MailServer Unspecified WebMail Email Viewing...

0.7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2005/04/18 12:00 a.m.14 views

Kerio MailServer < 6.0.9 Malformed Email DoS

Binary data 2834.prm...

5CVSS7.3AI score0.01227EPSS
SaveExploits0References1
CVE
CVE
added 2005/04/16 4:00 a.m.57 views

CVE-2005-1138

CVE-2005-1138 refers to an unknown vulnerability in the WebMail component of Kerio MailServer prior to 6.0.9 that can cause a denial of service via certain e‑mail messages. Multiple sources (NVD, CVE List, and Nessus plugin) describe it as a resource exhaustion/CPU consumption issue when malforme...

5CVSS6.6AI score0.01227EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2005/04/16 4:00 a.m.26 views

CVE-2005-1138

Unknown vulnerability in WebMail in Kerio MailServer before 6.0.9 allows remote attackers to cause a denial of service CPU consumption via certain e-mail messages...

6.6AI score0.01227EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2005/04/15 12:00 a.m.38 views

Kerio MailServer Webmail Malformed Email Handling Resource Exhaustion DoS

According to its banner, the remote host is running a version of Kerio MailServer prior to 6.0.9. Such versions may be subject to hangs or high CPU usage when malformed email messages are viewed through its WebMail component. An attacker may be able leverage this issue to deny service to legitima...

5CVSS5.6AI score0.01227EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2005/04/03 5:00 a.m.27 views

CVE-2005-0964

Unknown vulnerability in Kerio Personal Firewall 4.1.2 and earlier allows local users to bypass firewall rules via a malicious process that impersonates a legitimate process that has fewer restrictions...

6.2AI score0.00339EPSS
SaveExploits0References5
CVE
CVE
added 2005/04/03 5:00 a.m.55 views

CVE-2005-0964

Kerio Personal Firewall 4.1.2 and earlier has a local bypass vulnerability where a malicious process impersonates a legitimate, less-restricted process to bypass firewall rules. This can allow local users to circumvent protections. The CVE entry notes a MEDIUM impact (base score 4.6); no specific...

4.6CVSS6.6AI score0.00339EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2005/02/20 5:00 a.m.61 views

CVE-2004-1658

Kerio Personal Firewall 4.0 (KPF4) is affected by a local privilege escalation that allows a user with administrative rights to bypass the Application Security feature and execute arbitrary code by writing directly to \device\physicalmemory, restoring the kernel SDT ServiceTable. The vulnerabilit...

4.6CVSS7.3AI score0.00924EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder