Unscored CVE-2005-1063 EUVD-2005-1066GHSA-2hr3-rh39-x685

The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 all…

Published Apr 29, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to cause a denial of service (CPU consumption) via certain attacks that force the product to "compute unexpected conditions" and "perform cryptographic operations."

References

http://research.tic.udc.es/scg/advisories/20050429-2.txt
20050429 [CAN-2005-1063] Administration protocol abuse leads to Service and System Denial of Service mailing-list
http://www.kerio.com/security_advisory.html