PT-2007-7243 · Kerio · Kerio Winroute Firewall

Publicado 2007-12-15 · Atualizado 2017-08-08 · CVE-2007-6385

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Kerio WinRoute Firewall versions prior to 6.4.1

Description The issue concerns the proxy server in Kerio WinRoute Firewall, which does not properly enforce authentication for HTTPS pages. The impact and attack vectors of this issue are unknown, and it is unclear whether it crosses privilege boundaries.

Recommendations For versions prior to 6.4.1, update to version 6.4.1 or later to resolve the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2007-6385

Produtos afetados

Kerio Winroute Firewall

Referências · 9

• http://securityfocus.com/bid/26851 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-6385 · Nota de Segurança
• http://secunia.com/advisories/28072 · Aviso do Fabricante
• http://kerio.com/kwf_history.html · Correção
• http://vupen.com/english/advisories/2007/4212 · Nota
• http://osvdb.org/42122 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6385 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39020 · Nota
• http://securitytracker.com/id?1019095 · Nota