PT-2003-1661 · Kerio · Kerio Mailserver

David F. Madrid

·

Published

2003-06-28

·

Updated

2017-07-11

·

CVE-2003-0487

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: Kerio MailServer version 5.6.3
Description: The issue involves multiple buffer overflows and cross-site scripting attacks. Remote authenticated users can cause a denial of service and possibly execute arbitrary code via long parameters in various modules, including showuser in the do subscribe module, folder in the add acl and list modules, and user in the do map module. Additionally, cross-site scripting attacks are possible in the add acl and do map modules of the web mail component, where an attacker can exploit the vulnerability by enticing a victim user to follow a malicious link. The estimated number of potentially affected devices is not specified.
Recommendations: For Kerio MailServer version 5.6.3, consider disabling the do subscribe, add acl, list, and do map modules until a patch is available to prevent exploitation. Restrict access to the web mail component to minimize the risk of cross-site scripting attacks. Avoid using excessive length usernames and parameters in the affected modules to reduce the risk of buffer overflows. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2003-0487

Affected Products

Kerio Mailserver