Vulnerability in Kerio Mailserver
CVE-2005-1062
The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to quickly obtain passwords that are 5 characters or less via brute force methods.
EPSS: 0.026 (83.4th percentile) — read the EPSS interpretation.
Affected products
- Kerio Kerio_mailserver — versions 6.0.0, 6.0.1, 6.0.2
- Kerio Personal_firewall — versions 4.0.7, 4.0.8, 4.0.9
- Kerio Winroute_firewall — versions 6.0.0, 6.0.1, 6.0.2
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)