Kerio WinRoute Firewall Web Server Remote Source Code Disclosure Vulnerability

Kerio WinRoute Firewall is prone to a remote source-code- disclosure vulnerability because it fails to properly sanitize user- supplied input. An attacker can exploit this vulnerability to view the source code of files in the context of the server process; this may aid in further attacks. Version...

Kerio WinRoute Firewall Source Code Disclosure

Exploit Title: Kerio WinRoute Firewall Embedded Web ServerVersion: Source Code Disclosure Google Dork: Date: 10.05.2012 Author: Eugene Salov, Andrey Komarov Group-IB, http://group-ib.ru Software Link: http://winroute.ru/keriowinroutefirewall.htm Version: prior to 6 Tested on: Microsoft Windows CV...

Kerio WinRoute Firewall < 6.0.0 Information Disclosure Vulnerability - Active Check

Kerio WinRoute Firewall is prone to a remote source code disclosure vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Kerio WinRoute Firewall Web Server 6 - Source Code Disclosure

Kerio WinRoute Firewall Web Server 6 - Source Code Disclosure Exploit Title: Kerio WinRoute Firewall Embedded Web ServerVersion: Source Code Disclosure Google Dork: Date: 10.05.2012 Author: Eugene Salov, Andrey Komarov Group-IB, http://group-ib.ru Software Link:...

Kerio WinRoute Firewall Web Server < 6 Source Code Disclosure

Exploit for php platform in category web applications Exploit Title: Kerio WinRoute Firewall Embedded Web ServerVersion: Source Code Disclosure Google Dork: Date: 10.05.2012 Author: Eugene Salov, Andrey Komarov Group-IB, http://group-ib.ru Software Link: http://winroute.ru/keriowinroutefirewall.h...

Kerio WinRoute Firewall Web Server < 6 - Source Code Disclosure

Exploit Title: Kerio WinRoute Firewall Embedded Web ServerVersion: Source Code Disclosure Google Dork: Date: 10.05.2012 Author: Eugene Salov, Andrey Komarov Group-IB, http://group-ib.ru Software Link: http://winroute.ru/keriowinroutefirewall.htm Version: prior to 6 Tested on: Microsoft Windows CV...

Kerio Control Detection

Kerio Control formerly known as Kerio WinRoute is installed on the remote Windows host. It acts as a software-based firewall. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid51388; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate",...

Multiple Kerio Products Administration Console File Disclosure and Corruption Vulnerability

Multiple Kerio Products are prone to a file disclosure and corruption vulnerability. An attacker can exploit this vulnerability to gain access to files and corrupt data on a vulnerable computer. This may aid in further attacks. Kerio MailServer up to and including version 6.7.3 as well as Kerio...

Practical analysis once the WinRoute Backdoor offensive and defensive live-vulnerability warning-the black bar safety net

The school through the Windows 2 0 0 0 and the winroute proxy way to access the Internet. These two days, the proxy server always appears some strange phenomenon, running the program seems to be very slow, but it will also automatically restart. Could it be a virus? Or in a Trojan. Anyway, go and...

Kerio WinRoute防火墙未明代理验证绕过漏洞

Kerio WinRoute Firewall是一款商业性质的防火墙应用程序。 Kerio WinRoute Firewall存在未明安全问题，本地攻击者可以利用漏洞绕过代理验证，未授权访问受限资源。 目前没有详细漏洞细节提供。 Kerio WinRoute Firewall 6.2.3 Kerio WinRoute Firewall 6.2.2 Kerio WinRoute Firewall 6.2.1 Kerio WinRoute Firewall 6.2 Kerio WinRoute Firewall 6.1.4 Patch 2 Kerio WinRoute Firewall...

Authentication flaw

The proxy server in Kerio WinRoute Firewall before 6.4.1 does not properly enforce authentication for HTTPS pages, which has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries...

CVE-2007-6385

The proxy server in Kerio WinRoute Firewall before 6.4.1 does not properly enforce authentication for HTTPS pages, which has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries...

CVE-2007-6385

CVE-2007-6385 affects Kerio WinRoute Firewall (pre-6.4.1). The proxy server component does not properly enforce authentication for HTTPS pages. The underlying impact is stated as unknown within the available documents, and there is no detail on exploit vectors or specific conditions required for ...

CVE-2007-6385

The proxy server in Kerio WinRoute Firewall before 6.4.1 does not properly enforce authentication for HTTPS pages, which has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries...

Kerio Winroute Firewall 5.10 users credentials leak

Application: Kerio Winroute Firewall 5.10 Vendor: Kerio Technologies Inc. Vendor Site: http://www.kerio.com Remote: Yes Exploitable: Yes Risk level: Critical if proxy requires authentication Authors: Alexander Antipov & 3APA3A aka Pig Killer Authors Sites: http://www.securitylab.ru...

Kerio WinRoute防火墙DNS响应拒绝服务漏洞

Kerio WinRoute Firewall是适用于中小企业的网关防火墙。 Kerio WinRoute防火墙在处理畸形的DNS响应报文时存在漏洞，远程攻击者可能利用此漏洞导致防火墙崩溃。 Kerio WinRoute Firewall 6.2.3 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kerio.com/...

CVE-2006-5420

Kerio WinRoute Firewall 6.2.2 and earlier allows remote attackers to cause a denial of service crash via malformed DNS responses...

CVE-2006-5420

Kerio WinRoute Firewall 6.2.2 and earlier is affected by a vulnerability that allows remote attackers to cause a denial-of-service (crash) by sending malformed DNS responses. The available documents confirm the affected product and the weak input handling but do not provide details on exploitatio...

CVE-2006-2267

Kerio WinRoute Firewall before 6.2.1 allows remote attackers to cause a denial of service application crash via unknown vectors in the "email protocol inspectors," possibly 1 SMTP and 2 POP3...

Code injection

Kerio WinRoute Firewall before 6.2.1 allows remote attackers to cause a denial of service application crash via unknown vectors in the "email protocol inspectors," possibly 1 SMTP and 2 POP3...