CVE-2005-4157

Unspecified vulnerability in Kerio WinRoute Firewall before 6.1.3 allows remote attackers to authenticate to the service using an account that has been disabled...

CVE-2005-4157

CVE-2005-4157 concerns Kerio WinRoute Firewall prior to 6.1.3. The vulnerability, described in the public records, allows remote attackers to authenticate to the service using an account that has been disabled, indicating an authentication bypass/weak access control issue. The NVD entry assigns a...

Kerio WinRoute Firewall HTTP/HTTPS Management Detection

The remote host appears to be running the Kerio WinRoute Firewall application. It is possible to access the HTTP or HTTPS management interface on the host. Script Written By Ferdy Riphagen Script distributed under the GNU GPLv2 License. Changes by Tenable : - Improved version extraction - Report...

Multiple Kerio WinRoute Firewall vulnerabilities

Crash on RTSP streams processing, possibility to use disabled account...

[SA17519] Kerio WinRoute Firewall Potential Denial of Service and Security Bypass

TITLE: Kerio WinRoute Firewall Potential Denial of Service and Security Bypass SECUNIA ADVISORY ID: SA17519 VERIFY ADVISORY: http://secunia.com/advisories/17519/ CRITICAL: Less critical IMPACT: Security Bypass, DoS WHERE: From remote SOFTWARE: Kerio WinRoute Firewall 6.x...

Kerio Winroute Firewall Admin Service

The administrative interface of a personal firewall is listening on the remote port. The remote host appears to be running Kerio Winroute Firewall Admin service. SPDX-FileCopyrightText: 2005 Javier Munoz Mellid Some text descriptions might be excerpted from a referenced sources, and are Copyright...

CVE-2004-2483

Technical details about CVE-2004-2483 are not publicly available in the supplied documents; monitor for updates from official advisories. The provided references reiterate impact but do not add new specifics.

CVE-2004-2483

Kerio WinRoute Firewall before 6.0.9 uses information from PTR queries in response to A queries, which allows remote attackers to poison the DNS cache or cause a denial of service connection loss...

CVE-2005-1062

The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to quickly obtain passwords that are 5 characters or less via brute force methods...

Kerio Winroute Firewall Admin Service Detection

The remote host appears to be running Kerio Winroute Firewall Admin service. It is recommended to block incoming traffic to this port. Also, make sure the use of this software matches your corporate security policy. Copyright C 2005 Secure Computer Group. University of A Coruna This script was...

Multiple Kerio WinRoute Firewall, Kerio Personal Firewall and Kerio MailServer administration protocol vulnerabilities

Password bruteforcing, DoS...

[CAN-2005-1063] Administration protocol abuse leads to Service and System Denial of Service

Secure Computer Group - University of A Coruna http://research.tic.udc.es/scg/ -- x -- dotpi.com Information Technologies Research Labs http://www.dotpi.com ID: 20050429-2 Document title: Administration protocol abuse leads to Service and System Denial of Service Document revision: 1.0 Coordinate...

CVE-2005-1062

The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to quickly obtain passwords that are 5 characters or less via brute force methods...

CVE-2005-1063

The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to cause a denial of service CPU consumption via certain attacks that force the product to "compute unexpected conditions" and "perform...

CVE-2005-1062

Kerio’s administration protocol in Kerio WinRoute Firewall <= 6.0.10, Kerio Personal Firewall <= 4.1.2, and Kerio MailServer

CVE-2005-1063

The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to cause a denial of service CPU consumption via certain attacks that force the product to "compute unexpected conditions" and "perform...

CVE-2005-1063

Kerio’s CVE-2005-1063 affects Kerio WinRoute Firewall (up to 6.0.10), Kerio Personal Firewall (up to 4.1.2), and Kerio MailServer (up to 6.0.8). The issue arises from abusing the administration protocol, allowing remote attackers to cause a CPU-consuming denial of service by triggering pre-authen...

CVE-2004-1022

Kerio Winroute Firewall before 6.0.7, ServerFirewall before 1.0.1, and MailServer before 6.0.5 use symmetric encryption for user passwords, which allows attackers to decrypt the user database and obtain the passwords by extracting the secret key from within the software...

CVE-2004-1023

Kerio Winroute Firewall before 6.0.9, ServerFirewall before 1.0.1, and MailServer before 6.0.5, when installed on Windows based systems, do not modify the ACLs for critical files, which allows local users with Power Users privileges to modify programs, install malicious DLLs in the plug-ins folde...

CVE-2004-2483

Kerio WinRoute Firewall before 6.0.9 uses information from PTR queries in response to A queries, which allows remote attackers to poison the DNS cache or cause a denial of service connection loss...