Two vulnerabilities have been reported in Kerio WinRoute Firewall, which can be exploited by malicious people to poison the DNS cache, or certain local users to gain knowledge of sensitive information.

1) DNS cache entries recorded from PTR queries are used for standard A queries. This can be exploited by a malicious person to poison the DNS cache by supplying an arbitrary hostname for an IP address controlled by that person.

This vulnerability affects versions 6.0.8 and prior.

2) User passwords are stored in the user credential database using symmetric encryption. This may allow malicious users with access to the configuration files to gain knowledge of the passwords by decrypting them using a key hidden in the program logic.

This security issue affects versions 6.0.6 and prior.

NOTE: A problem with insecure ACLs has also been reported.

Solution
Update to version 6.0.9.
Further details available in Customer Area

Provided and/or discovered by
1) Reported by vendor.
2) Javier Munoz

Changelog
Further details available in Customer Area

Original Advisory
Kerio Technologies:
http://www.kerio.com/security_advisory.html#0412

Deep Links
Links available in Customer Area