Kerio Connect < 7.0.0 Products Administration Console File Disclosure and Corruption Vulnerabilities

High Nessus Plugin ID 47140


The remote mail server is affected by file disclosure and corruption vulnerabilities.


According to its banner, the remote host is running a version of Kerio Connect (or Kerio MailServer as it was formerly known) prior to 7.0.0. Successful exploitation of remote file disclosure and corruption vulnerabilities in the administration console of such versions could allow an attacker to disclose potentially sensitive information and manipulate data.


Upgrade to Kerio Connect 7.0.0 or later.

See Also

Plugin Details

Severity: High

ID: 47140

File Name: kerio_connect_700.nasl

Version: $Revision: 1.5 $

Type: remote

Family: Misc.

Published: 2010/06/25

Modified: 2012/08/16

Dependencies: 18184, 25991

Risk Information

Risk Factor: High


Base Score: 8

Temporal Score: 6.6

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:P/A:P

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:kerio:connect

Required KB Items: kerio/port

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2010/02/09

Vulnerability Publication Date: 2010/06/01

Reference Information

BID: 40505

Secunia: 39995

OSVDB: 65114