473 matches found
Kerio Firewall DoS
Problem with IP options processing allow to crash firewall with single packet...
Kerio MailServer < 6.0.3 Unspecified Code Execution
Binary data 2340.prm...
Kerio MailServer < 6.0.3 Unspecified Vulnerability
The remote host is running a version of Kerio MailServer prior to 6.0.3. There is an undisclosed flaw in the remote version of this server that might allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid15404;...
CVE-2004-1658
Kerio Personal Firewall 4.0 KPF4 allows local users with administrative privileges to bypass the Application Security feature and execute arbitrary processes by directly writing to \device\physicalmemory to restore the running kernel's SDT ServiceTable...
Kerio Mailserver Embedded HTTP Server Multiple Unspecified Vulnerabilities
Binary data 1725.prm...
Kerio MailServer < 6.6.2 Patch 3 / 6.7.0 Patch 1 XSS
Binary data 5048.prm...
Kerio MailServer < 6.0.1 Embedded HTTP Server Unspecified Issue
The remote host is running a version of Kerio MailServer prior to 6.0.1. Kerio Mailserver is an SMTP server that ships with an embedded HTTP server. It has been reported that there are multiple remote overflows in versions of Kerio prior to 6.0.1, although the exact nature of these overflows is n...
Kerio Personal Firewall 4.0.x - Web Filtering Remote Denial of Service
source: https://www.securityfocus.com/bid/10075/info Kerio Personal Firewall includes Web URI Filtering functionality. A denial of service vulnerability has been reported to affect Kerio Personal Firewall when Web Filtering functionality is enabled. The issue presents itself when Web Filtering...
Kerio Personal Firewall 4 and IE 6 "Bug"
---------------- Kerio Personal Firewall 4 - ---------------- +Web Filtering enabled problem If a URL contains 131213 Kerio Firewall Crashes http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=&btnG=Google +Search also it can be passed to a browser via IFRAME tag and crash Kerio without...
Kerio Personal Firewall 4.0.x - Web Filtering Remote Denial of Service
Kerio Personal Firewall 4.0.x - Web Filtering Remote Denial of Service source: https://www.securityfocus.com/bid/10075/info Kerio Personal Firewall includes Web URI Filtering functionality. A denial of service vulnerability has been reported to affect Kerio Personal Firewall when Web Filtering...
Kerio Personal Firewall DoS
Special characters in URL cause service to crash...
Kerio Mailserver buffer overflow
SPAM filter buffer overflow...
CVE-2003-1491
Kerio Personal Firewall KPF 2.1.4 has a default rule to accept incoming packets from DNS UDP port 53, which allows remote attackers to bypass the firewall filters via packets with a source port of 53...
[securitylab.ru & security.nnov] Kerio Winroute Firewall Xroxy problem
Application: Kerio Winroute Firewall 5.10 Vendor: Kerio Technologies Inc. Vendor Site: http://www.kerio.com Remote: Yes Exploitable: Yes Risk level: Critical if proxy requires authentication Authors: Alexander Antipov & 3APA3A aka Pig Killer Authors Sites: http://www.securitylab.ru...
CVE-2003-0487
Multiple buffer overflows in Kerio MailServer 5.6.3 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via 1 a long showuser parameter in the dosubscribe module, 2 a long folder parameter in the addacl module, 3 a long folder parameter in the list...
CVE-2003-0488
Multiple cross-site scripting XSS vulnerabilities in Kerio MailServer 5.6.3 allow remote attackers to insert arbitrary web script via 1 the addname parameter in the addacl module, or 2 the alias parameter in the domap module...
CVE-2003-0488
Multiple cross-site scripting XSS vulnerabilities in Kerio MailServer 5.6.3 allow remote attackers to insert arbitrary web script via 1 the addname parameter in the addacl module, or 2 the alias parameter in the domap module...
CVE-2003-0488
Kerio MailServer 5.6.3 is affected by multiple XSS vulnerabilities (via add_name in add_acl and alias in do_map). OpenVAS/Nessus notes additional flaws across 5.x lines that could allow shell access or remote code execution, plus DoS in admin/login and a buffer overrun in the spam-filter path for
CVE-2003-0487
Kerio MailServer 5.6.3 is affected by multiple buffer-overflow flaws that can be triggered by overly long parameters in specific modules (showuser in do_subscribe; folder in add_acl and list; user in do_map). These vulnerabilities allow remote authenticated users to cause a denial of service and,...
CVE-2003-0487
Multiple buffer overflows in Kerio MailServer 5.6.3 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via 1 a long showuser parameter in the dosubscribe module, 2 a long folder parameter in the addacl module, 3 a long folder parameter in the list...