CVE-2004-1022
Summary
| CVE | CVE-2004-1022 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2005-01-10 05:00:00 UTC |
| Updated | 2017-07-11 01:30:00 UTC |
| Description | Kerio Winroute Firewall before 6.0.7, ServerFirewall before 1.0.1, and MailServer before 6.0.5 use symmetric encryption for user passwords, which allows attackers to decrypt the user database and obtain the passwords by extracting the secret key from within the software. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Kerio | Kerio Mailserver | 5.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.1.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.6.3 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.6.4 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.6.5 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.10 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.2 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.3 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.4 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.5 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.6 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.7 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.8 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.9 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.2 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.3 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.4 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.1.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.6.3 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.6.4 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.6.5 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.10 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.2 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.3 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.4 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.5 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.6 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.7 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.8 | All | All | All |
| Application | Kerio | Kerio Mailserver | 5.7.9 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.1 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.2 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.3 | All | All | All |
| Application | Kerio | Kerio Mailserver | 6.0.4 | All | All | All |
| Application | Kerio | Serverfirewall | 1.0 | All | All | All |
| Application | Kerio | Serverfirewall | 1.0 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.0.1 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.0.2 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.0.3 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.0.4 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.0.5 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.0.6 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.0.7 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.0.8 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.0.9 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1.1 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1.10 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1.2 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1.3 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1.4 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1.5 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1.6 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1.7 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1.8 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1.9 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.10 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.1 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.2 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.3 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.4 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.5 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.6 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.7 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.8 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.0.1 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.0.2 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.0.3 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.0.4 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.0.5 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.0.6 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.0.7 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.0.8 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.0.9 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1.1 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1.10 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1.2 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1.3 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1.4 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1.5 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1.6 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1.7 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1.8 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.1.9 | All | All | All |
| Application | Kerio | Winroute Firewall | 5.10 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.1 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.2 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.3 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.4 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.5 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.6 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.7 | All | All | All |
| Application | Kerio | Winroute Firewall | 6.0.8 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| '[CAN-2004-1022] Insecure Credential Storage on Kerio Software' - MARC | BUGTRAQ | marc.info | |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.