Detections
Analytics

Kerio Connect < 7.0.0 Products Administration Console File Disclosure and Corruption Vulnerabilities

high Nessus Plugin ID 47140

Language:

Synopsis

The remote mail server is affected by file disclosure and corruption vulnerabilities.

Description

According to its banner, the remote host is running a version of Kerio Connect (or Kerio MailServer as it was formerly known) prior to 7.0.0. Successful exploitation of remote file disclosure and corruption vulnerabilities in the administration console of such versions could allow an attacker to disclose potentially sensitive information and manipulate data.

Solution

Upgrade to Kerio Connect 7.0.0 or later.

See Also

http://www.kerio.com/support#1006

Plugin Details

Severity: High

ID: 47140

File Name: kerio_connect_700.nasl

Version: 1.9

Type: remote

Family: Misc.

Published: 6/25/2010

Updated: 3/5/2024

Configuration: Enable thorough checks

Supported Sensors: Nessus

Vulnerability Information

CPE: cpe:/a:kerio:connect

Required KB Items: kerio/port

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2/9/2010

Vulnerability Publication Date: 6/1/2010

Reference Information

BID: 40505

SECUNIA: 39995