CVE-2005-1063: Kerio Mailserver

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to cause a denial of service (CPU consumption) via certain attacks that force the product to "compute unexpected conditions" and "perform cryptographic operations."

Affected products

• Kerio Kerio Mailserver: version 6.0 only; version 6.0.1 only; version 6.0.2 only; version 6.0.3 only; version 6.0.4 only; version 6.0.5 only
• Kerio Personal Firewall: version 4.0.6 only; version 4.0.7 only; version 4.0.8 only; version 4.0.9 only; version 4.0.10 only; version 4.0.16 only; …
• Kerio Winroute Firewall: version 6.0 only; version 6.0.1 only; version 6.0.2 only; version 6.0.3 only; version 6.0.4 only; version 6.0.5 only; …

Published 2005-04-29. Last modified 2026-06-16.