GCVE - cpe:2.3:a:kerio:kerio_mailserver:6.4.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:kerio:kerio_mailserver:6.4.2:*:*:*:*:*:*:*

part: a version: 6.4.2 update: *

Vendor	Kerio (`e69b4c59-3ac5-57d1-90ce-3259775b391e`)
Product	Kerio Mailserver (`675f03b2-bef7-5097-ac7b-faa27720f593`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-1506`	vulnerable	2026-06-08 04:57:59.887682	Details available The STARTTLS implementation in Kerio Connect 7.1.4 build 2985 and MailServer 6.x does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411. NOTE: some of these details are obtained from third party information. Published: 2011-03-22T17:00:00.000Z Updated: 2024-08-06T22:28:41.777Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/MAPG-8D9M4P https://exchange.xforce.ibmcloud.com/vulnerabilities/65932 http://www.vupen.com/english/advisories/2011/0610 http://www.securityfocus.com/bid/46767 http://www.kb.cert.org/vuls/id/555316	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5769`	vulnerable	2026-06-08 04:50:53.033039	Details available Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer before 6.6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) folder parameter to mailCompose.php or the (2) daytime parameter to calendarEdit.php. NOTE: some of these details are obtained from third party information. Published: 2008-12-30T20:00:00.000Z Updated: 2024-08-07T11:04:44.387Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/32863 http://secunia.com/advisories/32955 https://exchange.xforce.ibmcloud.com/vulnerabilities/47397 http://www.kerio.com/security_advisory.html http://www.kerio.com/kms_history.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5760`	vulnerable	2026-06-08 04:50:53.013190	Details available Cross-site scripting (XSS) vulnerability in error413.php in Kerio MailServer before 6.6.2 allows remote attackers to inject arbitrary web script or HTML via the sent parameter. NOTE: some of these details are obtained from third party information. Published: 2008-12-30T19:00:00.000Z Updated: 2024-08-07T11:04:44.550Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/32863 http://secunia.com/advisories/32955 http://www.kerio.com/security_advisory.html https://exchange.xforce.ibmcloud.com/vulnerabilities/47398 http://www.kerio.com/kms_history.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0859`	vulnerable	2026-06-08 04:50:17.954087	Details available Unspecified vulnerability in Kerio MailServer before 6.5.0 allows remote attackers to cause a denial of service (crash) via unspecified vectors related to decoding of uuencoded input, which triggers memory corruption. Published: 2008-02-21T00:00:00.000Z Updated: 2024-08-07T08:01:39.847Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1019428 http://www.vupen.com/english/advisories/2008/0594 http://secunia.com/advisories/29021 http://www.securityfocus.com/bid/27868 http://www.kerio.com/kms_history.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.