GCVE - cpe:2.3:a:kerio:kerio_mailserver:6.0.8:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:kerio:kerio_mailserver:6.0.8:*:*:*:*:*:*:*

part: a version: 6.0.8 update: *

Vendor	Kerio (`e69b4c59-3ac5-57d1-90ce-3259775b391e`)
Product	Kerio Mailserver (`675f03b2-bef7-5097-ac7b-faa27720f593`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-1506`	vulnerable	2026-06-08 04:57:59.875178	Details available The STARTTLS implementation in Kerio Connect 7.1.4 build 2985 and MailServer 6.x does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411. NOTE: some of these details are obtained from third party information. Published: 2011-03-22T17:00:00.000Z Updated: 2024-08-06T22:28:41.777Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/MAPG-8D9M4P https://exchange.xforce.ibmcloud.com/vulnerabilities/65932 http://www.vupen.com/english/advisories/2011/0610 http://www.securityfocus.com/bid/46767 http://www.kb.cert.org/vuls/id/555316	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5769`	vulnerable	2026-06-08 04:50:53.032742	Details available Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer before 6.6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) folder parameter to mailCompose.php or the (2) daytime parameter to calendarEdit.php. NOTE: some of these details are obtained from third party information. Published: 2008-12-30T20:00:00.000Z Updated: 2024-08-07T11:04:44.387Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/32863 http://secunia.com/advisories/32955 https://exchange.xforce.ibmcloud.com/vulnerabilities/47397 http://www.kerio.com/security_advisory.html http://www.kerio.com/kms_history.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5760`	vulnerable	2026-06-08 04:50:53.001954	Details available Cross-site scripting (XSS) vulnerability in error413.php in Kerio MailServer before 6.6.2 allows remote attackers to inject arbitrary web script or HTML via the sent parameter. NOTE: some of these details are obtained from third party information. Published: 2008-12-30T19:00:00.000Z Updated: 2024-08-07T11:04:44.550Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/32863 http://secunia.com/advisories/32955 http://www.kerio.com/security_advisory.html https://exchange.xforce.ibmcloud.com/vulnerabilities/47398 http://www.kerio.com/kms_history.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-6554`	vulnerable	2026-06-08 04:49:29.208238	Details available Unspecified vulnerability in Kerio MailServer before 6.3.1 allows remote attackers to cause a denial of service (segmentation fault and service stop) via certain long LDAP queries, as demonstrated by vd_kms6.pm. Published: 2006-12-14T18:00:00.000Z Updated: 2024-08-07T20:33:58.589Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/30872 http://secunia.com/advisories/23364 http://www.securityfocus.com/archive/1/454455/100/0/threaded http://www.kerio.com/kms_history.html http://www.vupen.com/english/advisories/2006/4993	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2203`	vulnerable	2026-06-08 04:48:59.117751	Details available Unspecified vulnerability in Kerio MailServer before 6.1.4 has unknown impact and remote attack vectors related to a "possible bypass of attachment filter." Published: 2006-05-05T10:00:00.000Z Updated: 2024-08-07T17:43:28.150Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/1610 http://secunia.com/advisories/19875 https://exchange.xforce.ibmcloud.com/vulnerabilities/26170 http://www.kerio.com/kms_history.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1158`	vulnerable	2026-06-08 04:48:56.374323	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-1062`	vulnerable	2026-06-08 04:48:25.279413	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.