CVE-2006-2267

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-05-09 · updated 2026-06-16

Description

Kerio WinRoute Firewall before 6.2.1 allows remote attackers to cause a denial of service (application crash) via unknown vectors in the "email protocol inspectors," possibly (1) SMTP and (2) POP3.

Affected products

Kerio Winroute Firewall: 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.0.6 (+36)

References

http://secunia.com/advisories/19947
http://securitytracker.com/id?1016032
http://www.kerio.com/kwf_history.html
http://www.osvdb.org/25273
http://www.osvdb.org/25300
http://www.securityfocus.com/archive/1/433585/100/0/threaded
http://www.securityfocus.com/bid/17859
http://www.vupen.com/english/advisories/2006/1677
https://exchange.xforce.ibmcloud.com/vulnerabilities/26263
http://secunia.com/advisories/19947
http://securitytracker.com/id?1016032
http://www.kerio.com/kwf_history.html

Get alerted when CVE-2006-2267 or the next vulnerability affects your stack