Kerio MailServer Multiple Unspecified Vulnerabilities

Bugtraq ID:	27868
Class:	Unknown
CVE:	CVE-2008-0859 CVE-2008-0860 CVE-2008-0858
Remote:	Yes
Local:	No
Published:	Feb 19 2008 12:00AM
Updated:	Jul 06 2016 02:17PM
Credit:	The vendor reported these issues.
Vulnerable:	Kerio Mailserver 6.4.2 Kerio Mailserver 6.4.1 Kerio Mailserver 6.3.1 Kerio Mailserver 6.2.2 Kerio Mailserver 6.1.3 Kerio Mailserver 6.0.10 Kerio Mailserver 6.0.9 Kerio Mailserver 6.0.5 Kerio Mailserver 6.0.4 Kerio Mailserver 6.0.3 Kerio Mailserver 6.0.2 Kerio Mailserver 6.0.1 Kerio Mailserver 6.0 Kerio Mailserver 5.7.10 Kerio Mailserver 5.7.9 Kerio Mailserver 5.7.8 Kerio Mailserver 5.7.7 Kerio Mailserver 5.7.6 Kerio Mailserver 5.7.5 Kerio Mailserver 5.7.4 Kerio Mailserver 5.7.3 Kerio Mailserver 5.7.2 Kerio Mailserver 5.7.1 Kerio Mailserver 5.7 .0 Kerio Mailserver 5.6.5 Kerio Mailserver 5.6.4 Kerio Mailserver 5.6.3 Kerio Mailserver 5.1.1 Kerio Mailserver 5.1 Kerio Mailserver 5.0 Kerio Mailserver 6.1.3 Patch 1
Not Vulnerable:	Kerio Mailserver 6.5

Kerio MailServer Multiple Unspecified Vulnerabilities

Kerio MailServer is prone to multiple unspecified vulnerabilities.

Attackers can exploit these issues to cause denial-of-service conditions or potentially execute arbitrary code in the context of the application; other attacks are also possible.

Very few details are currently available regarding these issues. We will update this BID as more information emerges.

Versions prior to Kerio MailServer 6.5.0 are vulnerable.

Kerio MailServer Multiple Unspecified Vulnerabilities

Currently we are not aware of any working exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Kerio MailServer Multiple Unspecified Vulnerabilities

Solution:
The vendor released MailServer 6.5.0 to address these issues. Please see the references for more information.