CVE-2005-1063

The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to cause a denial of service (CPU consumption) via certain attacks that force the product to "compute unexpected conditions" and "perform cryptographic operations."

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2005-04-29

Last modified

2024-08-07

Affected products

• Kerio Mailserver (Kerio)
• Personal Firewall (Kerio)
• Winroute Firewall (Kerio)

References

• http://research.tic.udc.es/scg/advisories/20050429-2.txt
• http://www.kerio.com/security_advisory.html
• http://www.securityfocus.com/archive/1/397220