Filtered by vendor Kerio Subscriptions
Filtered by product Serverfirewall Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2005-3286 1 Kerio 2 Personal Firewall, Serverfirewall 2024-11-21 N/A
The FWDRV driver in Kerio Personal Firewall 4.2 and Server Firewall 1.1.1 allows local users to cause a denial of service (crash) by setting the PAGE_NOACCESS or PAGE_GUARD protection on the Page Environment Block (PEB), which triggers an exception, aka the "PEB lockout vulnerability."
CVE-2004-1023 1 Kerio 3 Kerio Mailserver, Serverfirewall, Winroute Firewall 2024-11-21 N/A
Kerio Winroute Firewall before 6.0.9, ServerFirewall before 1.0.1, and MailServer before 6.0.5, when installed on Windows based systems, do not modify the ACLs for critical files, which allows local users with Power Users privileges to modify programs, install malicious DLLs in the plug-ins folder, and modify XML files related to configuration.
CVE-2004-1022 1 Kerio 3 Kerio Mailserver, Serverfirewall, Winroute Firewall 2024-11-21 N/A
Kerio Winroute Firewall before 6.0.7, ServerFirewall before 1.0.1, and MailServer before 6.0.5 use symmetric encryption for user passwords, which allows attackers to decrypt the user database and obtain the passwords by extracting the secret key from within the software.