Kerio Control and WinRoute Firewall Remote Cache Poisoning Vulnerability
BID:45498
Info
Kerio Control and WinRoute Firewall Remote Cache Poisoning Vulnerability
| Bugtraq ID: | 45498 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 20 2010 12:00AM |
| Updated: | Dec 20 2010 12:00AM |
| Credit: | Kerio |
| Vulnerable: |
Kerio WinRoute Firewall 7.0 Kerio WinRoute Firewall 6.7.1 Kerio WinRoute Firewall 6.7 Kerio WinRoute Firewall 6.4.1 Kerio WinRoute Firewall 6.2.3 Kerio WinRoute Firewall 6.2.2 Kerio WinRoute Firewall 6.2.1 Kerio WinRoute Firewall 6.2 Kerio WinRoute Firewall 6.1.4 Patch 2 Kerio WinRoute Firewall 6.1.4 Patch 1 Kerio WinRoute Firewall 6.1.4 Kerio WinRoute Firewall 6.1.3 Kerio WinRoute Firewall 6.1.2 Kerio WinRoute Firewall 6.1.1 Kerio WinRoute Firewall 6.1 Kerio WinRoute Firewall 6.0.11 Kerio WinRoute Firewall 6.0.9 Kerio WinRoute Firewall 6.0.8 Kerio WinRoute Firewall 6.0.7 Kerio WinRoute Firewall 6.0.6 Kerio WinRoute Firewall 6.0.5 Kerio WinRoute Firewall 6.0.4 Kerio WinRoute Firewall 6.0.3 Kerio WinRoute Firewall 6.0.2 Kerio WinRoute Firewall 6.0.1 Kerio WinRoute Firewall 6.0 Kerio WinRoute Firewall 5.10 Kerio WinRoute Firewall 5.1.10 Kerio WinRoute Firewall 5.1.9 Kerio WinRoute Firewall 5.1.8 Kerio WinRoute Firewall 5.1.7 Kerio WinRoute Firewall 5.1.6 Kerio WinRoute Firewall 5.1.5 Kerio WinRoute Firewall 5.1.4 Kerio WinRoute Firewall 5.1.3 Kerio WinRoute Firewall 5.1.2 Kerio WinRoute Firewall 5.1.1 Kerio WinRoute Firewall 5.1 Kerio WinRoute Firewall 5.0.9 Kerio WinRoute Firewall 5.0.8 Kerio WinRoute Firewall 5.0.7 Kerio WinRoute Firewall 5.0.6 Kerio WinRoute Firewall 5.0.5 Kerio WinRoute Firewall 5.0.4 Kerio WinRoute Firewall 5.0.3 Kerio WinRoute Firewall 5.0.2 Kerio WinRoute Firewall 5.0.1 Kerio WinRoute Firewall 7.1.0 Kerio WinRoute Firewall 6.7.1 patch2 Kerio Kerio Control 7.1.0 |
| Not Vulnerable: |
Kerio Kerio Control 7.1.0 Patch 1 |
Discussion
Kerio Control and WinRoute Firewall Remote Cache Poisoning Vulnerability
Kerio Control and WinRoute Firewall are prone to a remote cache-poisoning vulnerability.
An attacker can exploit this issue to divert data from a legitimate site to an attacker-specified site.
Successful exploits will allow the attacker to manipulate cache data, potentially facilitating man-in-the-middle, site-impersonation, or denial-of-service attacks.
Kerio Control and WinRoute Firewall are prone to a remote cache-poisoning vulnerability.
An attacker can exploit this issue to divert data from a legitimate site to an attacker-specified site.
Successful exploits will allow the attacker to manipulate cache data, potentially facilitating man-in-the-middle, site-impersonation, or denial-of-service attacks.
Exploit / POC
Kerio Control and WinRoute Firewall Remote Cache Poisoning Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
References
Kerio Control and WinRoute Firewall Remote Cache Poisoning Vulnerability
References:
References:
- Kerio Homepage (Kerio)
- KSEC-2010-12-20-01 (Kerio)