Filtered by vendor Kerio Subscriptions
Filtered by product Kerio Mailserver Subscriptions
Total 22 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2004-1022 1 Kerio 3 Kerio Mailserver, Serverfirewall, Winroute Firewall 2025-04-03 N/A
Kerio Winroute Firewall before 6.0.7, ServerFirewall before 1.0.1, and MailServer before 6.0.5 use symmetric encryption for user passwords, which allows attackers to decrypt the user database and obtain the passwords by extracting the secret key from within the software.
CVE-2003-0487 1 Kerio 1 Kerio Mailserver 2025-04-03 N/A
Multiple buffer overflows in Kerio MailServer 5.6.3 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via (1) a long showuser parameter in the do_subscribe module, (2) a long folder parameter in the add_acl module, (3) a long folder parameter in the list module, and (4) a long user parameter in the do_map module.