NetSight
medium5.0

CVE-2005-1063

The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers…

Impact

The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to cause a denial of service (CPU consumption) via certain attacks that force the product to "compute unexpected conditions" and "perform cryptographic operations."

Affected products

VendorProductAffected versions
KerioKerio Mailserver
Versions 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5
KerioPersonal Firewall
Versions 4.0.6, 4.0.7, 4.0.8, 4.0.9, 4.0.10, 4.0.16
KerioWinroute Firewall
Versions 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5

References