BID:10936

Kerio Mailserver Embedded HTTP Server Multiple Unspecified Vulnerabilities

Info

Kerio Mailserver Embedded HTTP Server Multiple Unspecified Vulnerabilities

Bugtraq ID:	10936
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Aug 12 2004 12:00AM
Updated:	Aug 12 2004 12:00AM
Credit:	These issues were reported in the product change log.
Vulnerable:	Kerio Mailserver 6.0 Kerio Mailserver 5.7.10 Kerio Mailserver 5.7.9 Kerio Mailserver 5.7.8 Kerio Mailserver 5.7.7 Kerio Mailserver 5.7.6 Kerio Mailserver 5.7.5 Kerio Mailserver 5.7.4 Kerio Mailserver 5.7.3 Kerio Mailserver 5.7.2 Kerio Mailserver 5.7.1 Kerio Mailserver 5.7 .0 Kerio Mailserver 5.6.5 Kerio Mailserver 5.6.4 Kerio Mailserver 5.6.3 Kerio Mailserver 5.1.1 Kerio Mailserver 5.1 Kerio Mailserver 5.0

Not Vulnerable:	Kerio Mailserver 6.0.1

Discussion

Kerio Mailserver Embedded HTTP Server Multiple Unspecified Vulnerabilities

Kerio MailServer version 6.0.1 has been released. This release addresses various unspecified security vulnerabilities in the embedded HTTP server implemented with the Kerio MailServer application. The cause and impact of these issues becomes currently unknown.

All versions of Kerio MailServer prior to 6.0.1 are considered vulnerable.

Exploit / POC

Kerio Mailserver Embedded HTTP Server Multiple Unspecified Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

Kerio Mailserver Embedded HTTP Server Multiple Unspecified Vulnerabilities

Solution:
Kerio MailServer version 6.0.1 is available to address these issues.

Kerio Mailserver 5.0