CVE-2004-1022

Kerio Winroute Firewall before 6.0.7, ServerFirewall before 1.0.1, and MailServer before 6.0.5 use symmetric encryption for user passwords, which allows attackers to decrypt the user database and obtain the passwords by extracting the secret key from within the software...

CVE-2004-1023

Kerio Winroute Firewall before 6.0.9, ServerFirewall before 1.0.1, and MailServer before 6.0.5, when installed on Windows based systems, do not modify the ACLs for critical files, which allows local users with Power Users privileges to modify programs, install malicious DLLs in the plug-ins folde...

CVE-2004-1023

Affected software: Kerio Winroute Firewall (<6.0.9), ServerFirewall (<1.0.1), and MailServer (

CVE-2004-1022

Kerio products Kerio WinRoute Firewall (before 6.0.7), ServerFirewall (before 1.0.1), and MailServer (before 6.0.5) store passwords using a symmetric encryption scheme. The vulnerability arises because the secret key is extractable from the software, enabling an attacker to decrypt the user datab...

WinRoute Proxy Detection

Binary data 1102.prm...

[securitylab.ru & security.nnov] Kerio Winroute Firewall Xroxy problem

Application: Kerio Winroute Firewall 5.10 Vendor: Kerio Technologies Inc. Vendor Site: http://www.kerio.com Remote: Yes Exploitable: Yes Risk level: Critical if proxy requires authentication Authors: Alexander Antipov & 3APA3A aka Pig Killer Authors Sites: http://www.securitylab.ru...

Positive Technologies Security Advisory 2003-0307: DoS-attack in Kerio WinRoute Firewall

Positive Technologies Security Advisory http://www.ptsecurity.com Title: DoS-attack in Kerio WinRoute Firewall Date: March, 07 2003 Severity: High Application: Kerio WinRoute Firewall 5.0.1 Platform: Windows 95/98/ME/NT/2000/XP Vendor Status: Notified, patched in version 5.0.2 I. DESCRIPTION...

CVE-1999-0471

The CVE-1999-0471 entry concerns Winroute’s remote proxy server, where an unauthenticated attacker can reconfigure the proxy through the "cancel" button. The PT-1999-1152 PTSecurity page confirms the issue but does not specify affected versions or a fix. Other sources reiterate that the vulnerabi...

winroute.3.0x.txt

Date: Fri, 9 Apr 1999 00:37:05 -0400 From: Michael R. Rudel To: [email protected] Subject: Bug in Winroute 3.04g There is a bug in the remote proxy server admin part of Winroute 3.04g. I have tested it on an earlier release 3.04a, and that is also vulnerable. When you first access the admin...

CVE-1999-0471

The remote proxy server in Winroute allows a remote attacker to reconfigure the proxy without authentication through the "cancel" button...

PT-1999-1152 · Triton · Winroute

Name of the Vulnerable Software and Affected Versions: Winroute affected versions not specified Description: The issue allows a remote attacker to reconfigure the proxy server without authentication. This can be achieved through the "cancel" button. Recommendations: At the moment, there is no...