Kerio WinRoute Firewall unspecified security bypass
| kerio-unspecified-security-bypass (39020) |  Medium Risk |
Description:
An unspecified vulnerability in the proxy server of Kerio WinRoute Firewall related to a failure to require authentication for HTTPS pages could allow a local attacker to bypass security restrictions and gain unauthorized access to the system.
Platforms Affected:
- Kerio, Kerio WinRoute Firewall prior to 6.4.1
Remedy:
Upgrade to the latest version of Kerio WinRoute Firewall (6.4.1 or later), available from the Kerio Technologies Inc. Web site. See References.
Consequences:
Bypass Security
References:
- Kerio Technologies Inc. Web site, Kerio WinRoute Firewall | Release history: Version 6.4.1 at http://www.kerio.com/kwf_history.html.
- BID-26851: Kerio WinRoute Firewall Unspecified Proxy Authentication Bypass Weakness
- CVE-2007-6385: The proxy server in Kerio WinRoute Firewall before 6.4.1 does not properly enforce authentication for HTTPS pages, which has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries.
- SA28072: Kerio WinRoute Firewall Proxy Server Unspecified Security Bypass
- SECTRACK ID: 1019095: Kerio WinRoute Firewall May Let Remote Users Bypass Authentication
- VUPEN/ADV-2007-4212: Kerio WinRoute Firewall Proxy Server Authentication Bypass Weakness
Reported:
Dec 13, 2007
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net