CVE-2005-1138: Medium severity Kerio Kerio MailServer vulnerability
Published Apr 16, 2005
·Updated
Unknown vulnerability in WebMail in Kerio MailServer before 6.0.9 allows remote attackers to cause a denial of service (CPU consumption) via certain e-mail messages.
Affected Software
23 affected components
Kerio Kerio MailServer=5.0
Kerio Kerio MailServer=5.1
Kerio Kerio MailServer=5.1.1
Kerio Kerio MailServer=5.6.3
Kerio Kerio MailServer=5.6.4
Kerio Kerio MailServer=5.6.5
Kerio Kerio MailServer=5.7.0
Kerio Kerio MailServer=5.7.1
Kerio Kerio MailServer=5.7.2
Kerio Kerio MailServer=5.7.3
Kerio Kerio MailServer=5.7.4
Kerio Kerio MailServer=5.7.5
Kerio Kerio MailServer=5.7.6
Kerio Kerio MailServer=5.7.7
Kerio Kerio MailServer=5.7.8
Kerio Kerio MailServer=5.7.9
Kerio Kerio MailServer=5.7.10
Kerio Kerio MailServer=6.0
Kerio Kerio MailServer=6.0.1
Kerio Kerio MailServer=6.0.2
Kerio Kerio MailServer=6.0.3
Kerio Kerio MailServer=6.0.4
Kerio Kerio MailServer=6.0.5
Remediation
Patch Available
Patch Available
Event History
Apr 16, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-1138?
CVE-2005-1138 has a medium severity level, as it allows remote attackers to cause denial of service through CPU consumption.
2
How do I fix CVE-2005-1138?
To fix CVE-2005-1138, update Kerio MailServer to version 6.0.9 or later.
3
Which versions of Kerio MailServer are affected by CVE-2005-1138?
CVE-2005-1138 affects Kerio MailServer versions 5.0 to 6.0.8.
4
What type of attack can be executed using CVE-2005-1138?
CVE-2005-1138 can be exploited to execute a denial of service attack.
5
Is CVE-2005-1138 a known vulnerability?
Yes, CVE-2005-1138 is a known vulnerability related to the WebMail feature in earlier versions of Kerio MailServer.