Secunia

Javier Munoz has reported two weaknesses in Kerio WinRoute Firewall, Kerio MailServer and Kerio Personal Firewall, which can be exploited by malicious people to potentially cause a DoS (Denial of Service) and brute force passwords.

1) An error in the remote administration protocol, where multiple login attempts can be performed over a single connection, can be exploited to brute force passwords if the username is known.

2) An error in the remote administration protocol in the handling of certain repeated pre-authentication protocol messages, may be exploited to cause a vulnerable system to consume a large amount of CPU resources by continuously sending specially crafted messages.

The weaknesses affect the following versions:
* Kerio WinRoute Firewall version 6.0.10 and prior.
* Kerio MailServer version 6.0.8 and prior.
* Kerio Personal Firewall version 4.1.2 and prior.

Solution
The weaknesses have been fixed in the following versions:
Further details available in Customer Area

Provided and/or discovered by
Javier Munoz, Secure Computer Group.

Original Advisory
Secure Computer Group:
http://research.tic.udc.es/scg/advisories/20050429-1.txt
http://research.tic.udc.es/scg/advisories/20050429-2.txt

Deep Links
Links available in Customer Area