GCVE - cpe:2.3:a:kerio:kerio_mailserver:6.0.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:kerio:kerio_mailserver:6.0.2:*:*:*:*:*:*:*

part: a version: 6.0.2 update: *

Vendor	Kerio (`e69b4c59-3ac5-57d1-90ce-3259775b391e`)
Product	Kerio Mailserver (`675f03b2-bef7-5097-ac7b-faa27720f593`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-1506`	vulnerable	2026-06-08 04:57:59.870178	Details available The STARTTLS implementation in Kerio Connect 7.1.4 build 2985 and MailServer 6.x does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411. NOTE: some of these details are obtained from third party information. Published: 2011-03-22T17:00:00.000Z Updated: 2024-08-06T22:28:41.777Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/MAPG-8D9M4P https://exchange.xforce.ibmcloud.com/vulnerabilities/65932 http://www.vupen.com/english/advisories/2011/0610 http://www.securityfocus.com/bid/46767 http://www.kb.cert.org/vuls/id/555316	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5769`	vulnerable	2026-06-08 04:50:53.032639	Details available Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer before 6.6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) folder parameter to mailCompose.php or the (2) daytime parameter to calendarEdit.php. NOTE: some of these details are obtained from third party information. Published: 2008-12-30T20:00:00.000Z Updated: 2024-08-07T11:04:44.387Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/32863 http://secunia.com/advisories/32955 https://exchange.xforce.ibmcloud.com/vulnerabilities/47397 http://www.kerio.com/security_advisory.html http://www.kerio.com/kms_history.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5760`	vulnerable	2026-06-08 04:50:52.997719	Details available Cross-site scripting (XSS) vulnerability in error413.php in Kerio MailServer before 6.6.2 allows remote attackers to inject arbitrary web script or HTML via the sent parameter. NOTE: some of these details are obtained from third party information. Published: 2008-12-30T19:00:00.000Z Updated: 2024-08-07T11:04:44.550Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/32863 http://secunia.com/advisories/32955 http://www.kerio.com/security_advisory.html https://exchange.xforce.ibmcloud.com/vulnerabilities/47398 http://www.kerio.com/kms_history.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0859`	vulnerable	2026-06-08 04:50:17.947039	Details available Unspecified vulnerability in Kerio MailServer before 6.5.0 allows remote attackers to cause a denial of service (crash) via unspecified vectors related to decoding of uuencoded input, which triggers memory corruption. Published: 2008-02-21T00:00:00.000Z Updated: 2024-08-07T08:01:39.847Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1019428 http://www.vupen.com/english/advisories/2008/0594 http://secunia.com/advisories/29021 http://www.securityfocus.com/bid/27868 http://www.kerio.com/kms_history.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-6554`	vulnerable	2026-06-08 04:49:29.205226	Details available Unspecified vulnerability in Kerio MailServer before 6.3.1 allows remote attackers to cause a denial of service (segmentation fault and service stop) via certain long LDAP queries, as demonstrated by vd_kms6.pm. Published: 2006-12-14T18:00:00.000Z Updated: 2024-08-07T20:33:58.589Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/30872 http://secunia.com/advisories/23364 http://www.securityfocus.com/archive/1/454455/100/0/threaded http://www.kerio.com/kms_history.html http://www.vupen.com/english/advisories/2006/4993	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2203`	vulnerable	2026-06-08 04:48:59.117637	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1158`	vulnerable	2026-06-08 04:48:56.370700	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-1138`	vulnerable	2026-06-08 04:48:25.633134	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-1063`	vulnerable	2026-06-08 04:48:25.296865	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-1062`	vulnerable	2026-06-08 04:48:25.275093	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-2441`	vulnerable	2026-06-08 04:48:09.739380	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1023`	vulnerable	2026-06-08 04:47:52.422973	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1022`	vulnerable	2026-06-08 04:47:52.391874	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.