2.1
CVSSv2

CVE-2004-1022

Published: 10/01/2005 Updated: 11/07/2017
CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9
VMScore: 187
Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

Kerio Winroute Firewall prior to 6.0.7, ServerFirewall prior to 1.0.1, and MailServer prior to 6.0.5 use symmetric encryption for user passwords, which allows malicious users to decrypt the user database and obtain the passwords by extracting the secret key from within the software.

Vulnerable Product Search on Vulmon Subscribe to Product

kerio kerio mailserver 5.6.4

kerio kerio mailserver 5.6.5

kerio kerio mailserver 5.7.6

kerio kerio mailserver 5.7.7

kerio kerio mailserver 6.0.4

kerio serverfirewall 1.0

kerio winroute firewall 5.0.7

kerio winroute firewall 5.0.8

kerio winroute firewall 5.1.5

kerio winroute firewall 5.1.6

kerio winroute firewall 6.0.2

kerio winroute firewall 6.0.3

kerio kerio mailserver 5.0

kerio kerio mailserver 5.1

kerio kerio mailserver 5.7.10

kerio kerio mailserver 5.7.2

kerio kerio mailserver 5.1.1

kerio kerio mailserver 5.6.3

kerio kerio mailserver 5.7.4

kerio kerio mailserver 5.7.5

kerio kerio mailserver 6.0.2

kerio kerio mailserver 6.0.3

kerio winroute firewall 5.0.5

kerio winroute firewall 5.0.6

kerio winroute firewall 5.1.3

kerio winroute firewall 5.1.4

kerio winroute firewall 6.0

kerio winroute firewall 6.0.1

kerio winroute firewall 6.0.8

kerio kerio mailserver 5.7.3

kerio kerio mailserver 6.0

kerio kerio mailserver 6.0.1

kerio winroute firewall 5.0.3

kerio winroute firewall 5.0.4

kerio winroute firewall 5.1.10

kerio winroute firewall 5.1.2

kerio winroute firewall 5.1.9

kerio winroute firewall 5.10

kerio winroute firewall 6.0.6

kerio winroute firewall 6.0.7

kerio kerio mailserver 5.7.0

kerio kerio mailserver 5.7.1

kerio kerio mailserver 5.7.8

kerio kerio mailserver 5.7.9

kerio winroute firewall 5.0.1

kerio winroute firewall 5.0.2

kerio winroute firewall 5.0.9

kerio winroute firewall 5.1

kerio winroute firewall 5.1.1

kerio winroute firewall 5.1.7

kerio winroute firewall 5.1.8

kerio winroute firewall 6.0.4

kerio winroute firewall 6.0.5