Lucene search

[email protected]CVE-2005-1063

HistoryApr 29, 2005 - 4:00 a.m.

CVE-2005-1063

2005-04-2904:00:00

[email protected]

web.nvd.nist.gov

cve-2005-1063

kerio winroute firewall

personal firewall

mailserver

administration protocol

vulnerability

denial of service

cpu consumption

remote attackers

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.7 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

77.9%

JSON

The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to cause a denial of service (CPU consumption) via certain attacks that force the product to “compute unexpected conditions” and “perform cryptographic operations.”

Affected configurations

NVD

Node

keriokerio_mailserverMatch6.0

keriokerio_mailserverMatch6.0.1

keriokerio_mailserverMatch6.0.2

keriokerio_mailserverMatch6.0.3

keriokerio_mailserverMatch6.0.4

keriokerio_mailserverMatch6.0.5

keriopersonal_firewallMatch4.0.6

keriopersonal_firewallMatch4.0.7

keriopersonal_firewallMatch4.0.8

keriopersonal_firewallMatch4.0.9

keriopersonal_firewallMatch4.0.10

keriopersonal_firewallMatch4.0.16

keriopersonal_firewallMatch4.1

keriopersonal_firewallMatch4.1.1

keriopersonal_firewallMatch4.1.2

keriowinroute_firewallMatch6.0

keriowinroute_firewallMatch6.0.1

keriowinroute_firewallMatch6.0.2

keriowinroute_firewallMatch6.0.3

keriowinroute_firewallMatch6.0.4

keriowinroute_firewallMatch6.0.5

keriowinroute_firewallMatch6.0.6

keriowinroute_firewallMatch6.0.7

keriowinroute_firewallMatch6.0.8

keriowinroute_firewallMatch6.0.9

CPENameOperatorVersion
kerio:kerio_mailserverkerio kerio mailservereq6.0
kerio:kerio_mailserverkerio kerio mailservereq6.0.1
kerio:kerio_mailserverkerio kerio mailservereq6.0.2
kerio:kerio_mailserverkerio kerio mailservereq6.0.3
kerio:kerio_mailserverkerio kerio mailservereq6.0.4
kerio:kerio_mailserverkerio kerio mailservereq6.0.5
kerio:personal_firewallkerio personal firewalleq4.0.6
kerio:personal_firewallkerio personal firewalleq4.0.7
kerio:personal_firewallkerio personal firewalleq4.0.8
kerio:personal_firewallkerio personal firewalleq4.0.9

CPE	Name	Operator	Version
kerio:kerio_mailserver	kerio kerio mailserver	eq	6.0
kerio:kerio_mailserver	kerio kerio mailserver	eq	6.0.1
kerio:kerio_mailserver	kerio kerio mailserver	eq	6.0.2
kerio:kerio_mailserver	kerio kerio mailserver	eq	6.0.3
kerio:kerio_mailserver	kerio kerio mailserver	eq	6.0.4
kerio:kerio_mailserver	kerio kerio mailserver	eq	6.0.5
kerio:personal_firewall	kerio personal firewall	eq	4.0.6
kerio:personal_firewall	kerio personal firewall	eq	4.0.7
kerio:personal_firewall	kerio personal firewall	eq	4.0.8
kerio:personal_firewall	kerio personal firewall	eq	4.0.9

Rows per page:

1-10 of 251

References

research.tic.udc.es/scg/advisories/20050429-2.txt

www.kerio.com/security_advisory.html

www.securityfocus.com/archive/1/397220

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.7 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

77.9%

JSON

Related for CVE-2005-1063

nvd1 securityvulns1 cvelist1 openvas1