NetSight
IP …
high7.5

CVE-2005-1062

The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers…

Impact

The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to quickly obtain passwords that are 5 characters or less via brute force methods.

Affected products

VendorProductAffected versions
KerioKerio Mailserver
Versions 6.0.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5
KerioPersonal Firewall
Versions 4.0.7, 4.0.8, 4.0.9, 4.0.10, 4.0.11, 4.0.12
KerioWinroute Firewall
Versions 6.0.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5

References