CVE-2005-1063

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-04-29 · updated 2026-06-16

Description

The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to cause a denial of service (CPU consumption) via certain attacks that force the product to "compute unexpected conditions" and "perform cryptographic operations."

Affected products

Kerio Mailserver: 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5
Kerio Personal Firewall: 4.0.6, 4.0.7, 4.0.8, 4.0.9, 4.0.10, 4.0.16 (+3)
Kerio Winroute Firewall: 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5 (+4)

References

http://research.tic.udc.es/scg/advisories/20050429-2.txt
http://www.kerio.com/security_advisory.html
http://www.securityfocus.com/archive/1/397220
http://research.tic.udc.es/scg/advisories/20050429-2.txt
http://www.kerio.com/security_advisory.html
http://www.securityfocus.com/archive/1/397220

Get alerted when CVE-2005-1063 or the next vulnerability affects your stack