Summary
Multiple Kerio Products are prone to a file disclosure and corruption vulnerability.
An attacker can exploit this vulnerability to gain access to files and corrupt data on a vulnerable computer. This may aid in further attacks.
Kerio MailServer up to and including version 6.7.3 as well as Kerio WinRoute Firewall up to and including version 6.7.1 patch2 are affected.
Solution
Updates are available. Please see the references for more information.
References
Severity
Classification
-
CVSS Base Score: 4.4
AV:L/AC:M/Au:N/C:P/I:P/A:P
Related Vulnerabilities
- Microsoft Windows SMTP Server MX Record Denial of Service Vulnerability
- Code-Crafters Ability Mail Server IMAP FETCH Request Remote Denial Of Service Vulnerability
- Quick 'n Easy Mail Server SMTP Request Remote Denial Of Service Vulnerability
- Multiple Kerio Products Administration Console File Disclosure and Corruption Vulnerability
- Mail relaying