Vulnerabilities > Kerio > Low
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2007-12-15 | CVE-2007-6385 | Improper Authentication vulnerability in Kerio Winroute Firewall The proxy server in Kerio WinRoute Firewall before 6.4.1 does not properly enforce authentication for HTTPS pages, which has unknown impact and attack vectors. | 2.1 |
| 2006-07-24 | CVE-2006-3787 | Denial of Service vulnerability in Sunbelt Kerio Personal Firewall CreateRemoteThread kpf4ss.exe in Sunbelt Kerio Personal Firewall 4.3.x before 4.3.268 does not properly hook the CreateRemoteThread API function, which allows local users to cause a denial of service (crash) and bypass protection mechanisms by calling CreateRemoteThread. | 2.1 |
| 2005-10-23 | CVE-2005-3286 | Local Denial of Service vulnerability in Kerio Personal Firewall and ServerFirewall The FWDRV driver in Kerio Personal Firewall 4.2 and Server Firewall 1.1.1 allows local users to cause a denial of service (crash) by setting the PAGE_NOACCESS or PAGE_GUARD protection on the Page Environment Block (PEB), which triggers an exception, aka the "PEB lockout vulnerability." | 2.1 |
| 2005-01-10 | CVE-2004-1022 | Unspecified vulnerability in Kerio Mailserver, Serverfirewall and Winroute Firewall Kerio Winroute Firewall before 6.0.7, ServerFirewall before 1.0.1, and MailServer before 6.0.5 use symmetric encryption for user passwords, which allows attackers to decrypt the user database and obtain the passwords by extracting the secret key from within the software. | 2.1 |
| 2005-01-10 | CVE-2004-1023 | Local Security vulnerability in Kerio Mailserver, Serverfirewall and Winroute Firewall Kerio Winroute Firewall before 6.0.9, ServerFirewall before 1.0.1, and MailServer before 6.0.5, when installed on Windows based systems, do not modify the ACLs for critical files, which allows local users with Power Users privileges to modify programs, install malicious DLLs in the plug-ins folder, and modify XML files related to configuration. | 2.1 |
| 2004-12-31 | CVE-2004-1907 | Remote Denial Of Service vulnerability in Kerio Personal Firewall Web Filtering The Web Filtering functionality in Kerio Personal Firewall (KPF) 4.0.13 allows remote attackers to cause a denial of service (crash) by sending hex-encoded URLs containing "%13%12%13". | 2.6 |