CVE-2004-1023: Low severity Kerio Kerio MailServer vulnerability
Kerio Winroute Firewall before 6.0.9, ServerFirewall before 1.0.1, and MailServer before 6.0.5, when installed on Windows based systems, do not modify the ACLs for critical files, which allows local users with Power Users privileges to modify programs, install malicious DLLs in the plug-ins folder, and modify XML files related to configuration.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1023?
CVE-2004-1023 has been classified as a medium severity vulnerability due to the potential for local users to modify critical application files.
How do I fix CVE-2004-1023?
To fix CVE-2004-1023, ensure that the Access Control Lists (ACLs) for critical files are properly configured to prevent unauthorized modifications by users with Power Users privileges.
What software is affected by CVE-2004-1023?
CVE-2004-1023 affects Kerio Winroute Firewall versions 6.0.0 to 6.0.9, ServerFirewall versions up to 1.0.1, and MailServer versions up to 6.0.5.
Can local users exploit CVE-2004-1023?
Yes, local users with Power Users privileges can exploit CVE-2004-1023 to modify programs and potentially install malicious DLLs.
Is there a patch available for CVE-2004-1023?
A patch is available in the later versions of the affected software, so upgrading to the latest versions will remediate CVE-2004-1023.