CVE-2004-1022
Summary
| CVE | CVE-2004-1022 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2005-01-10 05:00:00 UTC |
| Updated | 2025-04-03 01:03:51 UTC |
| Description | Kerio Winroute Firewall before 6.0.7, ServerFirewall before 1.0.1, and MailServer before 6.0.5 use symmetric encryption for user passwords, which allows attackers to decrypt the user database and obtain the passwords by extracting the secret key from within the software. |
Risk And Classification
Primary CVSS: v2.0 2.1 from [email protected]
AV:L/AC:L/Au:N/C:P/I:N/A:N
Problem Types: NVD-CWE-Other | n/a
CVSS v2.0 Breakdown
Access Vector
LocalAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
NoneAvailability
NoneAV:L/AC:L/Au:N/C:P/I:N/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Kerio | Kerio Mailserver | 5.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.1.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.6.3 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.6.4 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.6.5 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.10 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.2 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.3 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.4 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.5 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.6 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.7 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.8 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.9 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.2 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.3 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.4 | All | All | All |
| Application | Kerio | Serverfirewall | 1.0 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.0.1 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.0.2 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.0.3 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.0.4 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.0.5 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.0.6 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.0.7 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.0.8 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.0.9 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1.1 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1.10 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1.2 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1.3 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1.4 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1.5 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1.6 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1.7 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1.8 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1.9 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.10 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.1 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.2 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.3 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.4 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.5 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.6 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.7 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.8 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| '[CAN-2004-1022] Insecure Credential Storage on Kerio Software' - MARC | af854a3a-2127-422b-91ae-364da2661108 | marc.info | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.