Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

kerio kerio mailserver 5.6.3 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2003-0487
Multiple buffer overflows in Kerio MailServer 5.6.3 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via (1) a long showuser parameter in the do_subscribe module, (2) a long folder parameter in the add_acl module, (3) a long folder...
Kerio Kerio Mailserver 5.6.3
5.1
CVSSv2
CVE-2003-0488
Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer 5.6.3 allow remote malicious users to insert arbitrary web script via (1) the add_name parameter in the add_acl module, or (2) the alias parameter in the do_map module.
Kerio Kerio Mailserver 5.6.3
5
CVSSv2
CVE-2005-1138
Unknown vulnerability in WebMail in Kerio MailServer prior to 6.0.9 allows remote malicious users to cause a denial of service (CPU consumption) via certain e-mail messages.
Kerio Kerio Mailserver 5.0Kerio Kerio Mailserver 5.7.7Kerio Kerio Mailserver 5.7.8Kerio Kerio Mailserver 5.7.9Kerio Kerio Mailserver 6.0Kerio Kerio Mailserver 5.6.5Kerio Kerio Mailserver 5.7.0Kerio Kerio Mailserver 5.7.1Kerio Kerio Mailserver 5.7.10Kerio Kerio Mailserver 6.0.5Kerio Kerio Mailserver 5.1Kerio Kerio Mailserver 5.6.3Kerio Kerio Mailserver 5.7.3Kerio Kerio Mailserver 5.7.5Kerio Kerio Mailserver 6.0.2Kerio Kerio Mailserver 6.0.4Kerio Kerio Mailserver 5.1.1Kerio Kerio Mailserver 5.6.4Kerio Kerio Mailserver 5.7.2Kerio Kerio Mailserver 5.7.4Kerio Kerio Mailserver 5.7.6Kerio Kerio Mailserver 6.0.1
5
CVSSv2
CVE-2006-6554
Unspecified vulnerability in Kerio MailServer prior to 6.3.1 allows remote malicious users to cause a denial of service (segmentation fault and service stop) via certain long LDAP queries, as demonstrated by vd_kms6.pm.
Kerio Kerio Mailserver 5.0Kerio Kerio Mailserver 5.1Kerio Kerio Mailserver 5.7.10Kerio Kerio Mailserver 5.7.2Kerio Kerio Mailserver 5.7.3Kerio Kerio Mailserver 6.0Kerio Kerio Mailserver 6.0.0Kerio Kerio Mailserver 6.0.7Kerio Kerio Mailserver 6.0.8Kerio Kerio Mailserver 5.6.4Kerio Kerio Mailserver 5.6.5Kerio Kerio Mailserver 5.7.6Kerio Kerio Mailserver 5.7.7Kerio Kerio Mailserver 6.0.3Kerio Kerio Mailserver 6.0.4Kerio Kerio Mailserver 5.1.1Kerio Kerio Mailserver 5.6.3Kerio Kerio Mailserver 5.7.4Kerio Kerio Mailserver 5.7.5Kerio Kerio Mailserver 6.0.1Kerio Kerio Mailserver 6.0.2Kerio Kerio Mailserver 6.1.3 Patch 1
5
CVSSv2
CVE-2008-0859
Unspecified vulnerability in Kerio MailServer prior to 6.5.0 allows remote malicious users to cause a denial of service (crash) via unspecified vectors related to decoding of uuencoded input, which triggers memory corruption.
Kerio Kerio Mailserver 5.6.3Kerio Kerio Mailserver 5.6.4Kerio Kerio Mailserver 5.7.4Kerio Kerio Mailserver 5.7.5Kerio Kerio Mailserver 6.0.10Kerio Kerio Mailserver 6.0.2Kerio Kerio Mailserver 6.4.1Kerio Kerio Mailserver 6.4.2Kerio Kerio Mailserver 5.0Kerio Kerio Mailserver 5.1Kerio Kerio Mailserver 5.1.1Kerio Kerio Mailserver 5.7.2Kerio Kerio Mailserver 5.7.3Kerio Kerio Mailserver 6.0Kerio Kerio Mailserver 6.0.1Kerio Kerio Mailserver 6.3.1Kerio Kerio Mailserver 6.4.0Kerio Kerio Mailserver 5.7.1Kerio Kerio Mailserver 5.7.10Kerio Kerio Mailserver 5.7.8Kerio Kerio Mailserver 5.7.9Kerio Kerio Mailserver 6.0.9
4.3
CVSSv2
CVE-2008-5760
Cross-site scripting (XSS) vulnerability in error413.php in Kerio MailServer prior to 6.6.2 allows remote malicious users to inject arbitrary web script or HTML via the sent parameter. NOTE: some of these details are obtained from third party information.
Kerio Kerio Mailserver 6.5.2Kerio Kerio Mailserver 6.5.1Kerio Kerio Mailserver 6.3.0Kerio Kerio Mailserver 6.2.2Kerio Kerio Mailserver 6.1.3Kerio Kerio Mailserver 6.1.1Kerio Kerio Mailserver 6.0.0Kerio Kerio Mailserver 6.0.1Kerio Kerio Mailserver 5.7.5Kerio Kerio Mailserver 5.7.8Kerio Kerio Mailserver 5.6.3Kerio Kerio Mailserver 5.6.4Kerio Kerio Mailserver 6.6.0Kerio Kerio Mailserver 6.3.1 P2Kerio Kerio Mailserver 6.3.1Kerio Kerio Mailserver 6.3.1 P1Kerio Kerio Mailserver 6.1.2Kerio Kerio Mailserver 6.0.9Kerio Kerio Mailserver 6.0.2Kerio Kerio Mailserver 6.0.3Kerio Kerio Mailserver 5.7.4Kerio Kerio Mailserver 5.7.3
4.3
CVSSv2
CVE-2008-5769
Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer prior to 6.6.2 allow remote malicious users to inject arbitrary web script or HTML via the (1) folder parameter to mailCompose.php or the (2) daytime parameter to calendarEdit.php. NOTE: some of these details...
Kerio Kerio Mailserver 6.4.2Kerio Kerio MailserverKerio Kerio Mailserver 6.4.1Kerio Kerio Mailserver 6.4.0Kerio Kerio Mailserver 6.1.3 Patch 1Kerio Kerio Mailserver 6.1.4Kerio Kerio Mailserver 6.6.0Kerio Kerio Mailserver 6.3.1 P2Kerio Kerio Mailserver 6.3.1Kerio Kerio Mailserver 6.3.1 P1Kerio Kerio Mailserver 6.1.2Kerio Kerio Mailserver 6.0.9Kerio Kerio Mailserver 6.0.2Kerio Kerio Mailserver 6.0.3Kerio Kerio Mailserver 5.7.3Kerio Kerio Mailserver 5.7.6Kerio Kerio Mailserver 5.1Kerio Kerio Mailserver 6.5.0Kerio Kerio Mailserver 6.2.0Kerio Kerio Mailserver 6.2.1Kerio Kerio Mailserver 6.0.6Kerio Kerio Mailserver 6.0.7
6.8
CVSSv2
CVE-2011-1506
The STARTTLS implementation in Kerio Connect 7.1.4 build 2985 and MailServer 6.x does not properly restrict I/O buffering, which allows man-in-the-middle malicious users to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is ...
Kerio Connect 7.1.4Kerio Kerio Mailserver 6.4.0Kerio Kerio Mailserver 6.0.6Kerio Kerio Mailserver 6.4.2Kerio Kerio Mailserver 6.0.0Kerio Kerio Mailserver 6.0.1Kerio Kerio Mailserver 6.0.8Kerio Kerio Mailserver 6.1.1Kerio Kerio Mailserver 6.5.1Kerio Kerio Mailserver 6.0.10Kerio Kerio Mailserver 6.0.9Kerio Kerio Mailserver 6.0.2Kerio Kerio Mailserver 6.0.3Kerio Kerio Mailserver 6.1.2Kerio Kerio Mailserver 6.1.3Kerio Kerio Mailserver 6.5.2Kerio Kerio Mailserver 5.6.5Kerio Kerio Mailserver 5.7.2Kerio Kerio Mailserver 6.6.0Kerio Kerio Mailserver 6.5.0Kerio Kerio Mailserver 5.7.7Kerio Kerio Mailserver 6.3.1 P2
2.1
CVSSv2
CVE-2004-1022
Kerio Winroute Firewall prior to 6.0.7, ServerFirewall prior to 1.0.1, and MailServer prior to 6.0.5 use symmetric encryption for user passwords, which allows malicious users to decrypt the user database and obtain the passwords by extracting the secret key from within the softwa...
Kerio Kerio Mailserver 5.6.4Kerio Kerio Mailserver 5.6.5Kerio Kerio Mailserver 5.7.6Kerio Kerio Mailserver 5.7.7Kerio Kerio Mailserver 6.0.4Kerio Serverfirewall 1.0Kerio Winroute Firewall 5.0.7Kerio Winroute Firewall 5.0.8Kerio Winroute Firewall 5.1.5Kerio Winroute Firewall 5.1.6Kerio Winroute Firewall 6.0.2Kerio Winroute Firewall 6.0.3Kerio Kerio Mailserver 5.0Kerio Kerio Mailserver 5.1Kerio Kerio Mailserver 5.7.10Kerio Kerio Mailserver 5.7.2Kerio Kerio Mailserver 5.1.1Kerio Kerio Mailserver 5.6.3Kerio Kerio Mailserver 5.7.4Kerio Kerio Mailserver 5.7.5Kerio Kerio Mailserver 6.0.2Kerio Kerio Mailserver 6.0.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook