PT-2005-4856 · Kerio · Kerio Winroute Firewall

Published 2005-12-11 · Updated 2017-07-20 · CVE-2005-4157

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Kerio WinRoute Firewall versions prior to 6.1.3

Description The issue allows remote attackers to authenticate to the service using a disabled account.

Recommendations For versions prior to 6.1.3, update to version 6.1.3 or later to resolve the issue.

Fix

Related Identifiers

CVE-2005-4157

Affected Products

Kerio Winroute Firewall

References · 8

• http://securityfocus.com/bid/15388 · Patch
• http://secunia.com/advisories/17519 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-4157 · Security Note
• http://kerio.com/kwf_history.html · Patch
• http://vupen.com/english/advisories/2005/2391 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23035 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4157 · Note
• http://securitytracker.com/alerts/2005/Nov/1015194.html · Note