Kerio WinRoute Firewall RTSP Stream Denial of Service Vulnerability

Bugtraq ID:	15387
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Nov 11 2005 12:00AM
Updated:	Nov 11 2005 12:00AM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	Kerio WinRoute Firewall 6.1.2 Kerio WinRoute Firewall 6.1.1 Kerio WinRoute Firewall 6.1 Kerio WinRoute Firewall 6.0.11 Kerio WinRoute Firewall 6.0.9 Kerio WinRoute Firewall 6.0.8 Kerio WinRoute Firewall 6.0.7 Kerio WinRoute Firewall 6.0.6 Kerio WinRoute Firewall 6.0.5 Kerio WinRoute Firewall 6.0.4 Kerio WinRoute Firewall 6.0.3 Kerio WinRoute Firewall 6.0.2 Kerio WinRoute Firewall 6.0.1 Kerio WinRoute Firewall 6.0
Not Vulnerable:	Kerio WinRoute Firewall 6.1.3

Kerio WinRoute Firewall RTSP Stream Denial of Service Vulnerability

Kerio WinRoute Firewall is prone to a remote denial of service vulnerability.

A remote attacker can exploit this vulnerability to crash the affected service, effectively disabling the firewall. This may aid in further attacks.

Kerio WinRoute Firewall RTSP Stream Denial of Service Vulnerability

No exploit is required.

Kerio WinRoute Firewall RTSP Stream Denial of Service Vulnerability

Solution:
The vendor has addressed this issue in version 6.1.3. Users are advised to contact the vendor for the appropriate updates.

Kerio WinRoute Firewall RTSP Stream Denial of Service Vulnerability

References:

• Kerio Homepage (Kerio)
  
• WinRoute Firewall Product Page (Kerio)
  
• WinRoute Firewall Release History (Kerio)