PT-2005-2082 · Kerio · Kerio Personal Firewall+2

Published 2005-04-29 · Updated 2008-09-05 · CVE-2005-1063

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Kerio WinRoute Firewall versions 6.x up to 6.0.10 Kerio Personal Firewall versions 4.x up to 4.1.2 Kerio MailServer versions up to 6.0.8

Description The issue allows remote attackers to cause a denial of service, resulting in CPU consumption, by forcing the product to compute unexpected conditions and perform cryptographic operations. This can be triggered during the pre-authentication state, and it may also occur when the system exceeds the limit of maximum number of user connections, leading to a loss of availability for the service.

Recommendations For Kerio WinRoute Firewall versions 6.x up to 6.0.10, consider restricting access to the administration protocol to minimize the risk of exploitation. For Kerio Personal Firewall versions 4.x up to 4.1.2, restrict the number of user connections to prevent exceeding the maximum limit. For Kerio MailServer versions up to 6.0.8, limit cryptographic operations to reduce the impact of the denial of service attack. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-1063

Affected Products

Kerio Mailserver

Kerio Personal Firewall

Kerio Winroute Firewall

References · 5

• http://securityfocus.com/archive/1/397220 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-1063 · Security Note
• http://kerio.com/security_advisory.html · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1063 · Note
• http://research.tic.udc.es/scg/advisories/20050429-2.txt · Note