PT-2003-1181 · Kerio · Kerio Mailserver

Published 2003-03-18 · Updated 2008-09-05 · CVE-2002-1434

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Kerio MailServer version 5.0

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities in the Web mail module. These vulnerabilities allow remote attackers to execute HTML script as other users via certain URLs.

Recommendations For Kerio MailServer version 5.0, update to a version that includes a fix for this issue to prevent remote attackers from executing HTML script as other users.

Exploit

Fix

Related Identifiers

CVE-2002-1434

Affected Products

Kerio Mailserver

References · 5

• 🔥 http://securityfocus.com/bid/5507 · Exploit
• 🔥 https://exploit-db.com/exploits/21728 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1434 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2002-08/0183.html · Vendor Advisory
• http://iss.net/security_center/static/9905.php · Vendor Advisory