GCVE - cpe:2.3:a:kerio:kerio_mailserver:6.1.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:kerio:kerio_mailserver:6.1.4:*:*:*:*:*:*:*

part: a version: 6.1.4 update: *

Vendor	Kerio (`e69b4c59-3ac5-57d1-90ce-3259775b391e`)
Product	Kerio Mailserver (`675f03b2-bef7-5097-ac7b-faa27720f593`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-1506`	vulnerable	2026-06-08 04:57:59.881163	Details available The STARTTLS implementation in Kerio Connect 7.1.4 build 2985 and MailServer 6.x does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411. NOTE: some of these details are obtained from third party information. Published: 2011-03-22T17:00:00.000Z Updated: 2024-08-06T22:28:41.777Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/MAPG-8D9M4P https://exchange.xforce.ibmcloud.com/vulnerabilities/65932 http://www.vupen.com/english/advisories/2011/0610 http://www.securityfocus.com/bid/46767 http://www.kb.cert.org/vuls/id/555316	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5769`	vulnerable	2026-06-08 04:50:53.032866	Details available Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer before 6.6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) folder parameter to mailCompose.php or the (2) daytime parameter to calendarEdit.php. NOTE: some of these details are obtained from third party information. Published: 2008-12-30T20:00:00.000Z Updated: 2024-08-07T11:04:44.387Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/32863 http://secunia.com/advisories/32955 https://exchange.xforce.ibmcloud.com/vulnerabilities/47397 http://www.kerio.com/security_advisory.html http://www.kerio.com/kms_history.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5760`	vulnerable	2026-06-08 04:50:53.006823	Details available Cross-site scripting (XSS) vulnerability in error413.php in Kerio MailServer before 6.6.2 allows remote attackers to inject arbitrary web script or HTML via the sent parameter. NOTE: some of these details are obtained from third party information. Published: 2008-12-30T19:00:00.000Z Updated: 2024-08-07T11:04:44.550Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/32863 http://secunia.com/advisories/32955 http://www.kerio.com/security_advisory.html https://exchange.xforce.ibmcloud.com/vulnerabilities/47398 http://www.kerio.com/kms_history.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.