Kerio Mailserver
Approved changes feed: RSS · Atom
cpe:2.3:a:kerio:kerio_mailserver:5.6.4:*:*:*:*:*:*:*
part: a version: 5.6.4 update: *
| Vendor | Kerio (e69b4c59-3ac5-57d1-90ce-3259775b391e) |
|---|---|
| Product | Kerio Mailserver (675f03b2-bef7-5097-ac7b-faa27720f593) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-1506 |
vulnerable | 2026-06-08 04:57:59.858607 |
Details available
The STARTTLS implementation in Kerio Connect 7.1.4 build 2985 and MailServer 6.x does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411. NOTE: some of these details are obtained from third party information.
Published: 2011-03-22T17:00:00.000Z
Updated: 2024-08-06T22:28:41.777Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5769 |
vulnerable | 2026-06-08 04:50:53.032366 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer before 6.6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) folder parameter to mailCompose.php or the (2) daytime parameter to calendarEdit.php. NOTE: some of these details are obtained from third party information.
Published: 2008-12-30T20:00:00.000Z
Updated: 2024-08-07T11:04:44.387Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5760 |
vulnerable | 2026-06-08 04:50:52.987517 |
Details available
Cross-site scripting (XSS) vulnerability in error413.php in Kerio MailServer before 6.6.2 allows remote attackers to inject arbitrary web script or HTML via the sent parameter. NOTE: some of these details are obtained from third party information.
Published: 2008-12-30T19:00:00.000Z
Updated: 2024-08-07T11:04:44.550Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-0859 |
vulnerable | 2026-06-08 04:50:17.937871 |
Details available
Unspecified vulnerability in Kerio MailServer before 6.5.0 allows remote attackers to cause a denial of service (crash) via unspecified vectors related to decoding of uuencoded input, which triggers memory corruption.
Published: 2008-02-21T00:00:00.000Z
Updated: 2024-08-07T08:01:39.847Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-6554 |
vulnerable | 2026-06-08 04:49:29.197135 |
Details available
Unspecified vulnerability in Kerio MailServer before 6.3.1 allows remote attackers to cause a denial of service (segmentation fault and service stop) via certain long LDAP queries, as demonstrated by vd_kms6.pm.
Published: 2006-12-14T18:00:00.000Z
Updated: 2024-08-07T20:33:58.589Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-1158 |
vulnerable | 2026-06-08 04:48:56.361211 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1138 |
vulnerable | 2026-06-08 04:48:25.624341 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1022 |
vulnerable | 2026-06-08 04:47:52.380854 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.