{"id":"CVE-2005-1062","aliases":["EUVD-2005-1065","GHSA-p2g2-c24h-84cp"],"status":"published","title":"The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x...","description":"The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to quickly obtain passwords that are 5 characters or less via brute force methods.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02555,"percentile":0.85171,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2005-04-29T04:00:00Z","modified":"2026-06-16T22:12:21Z","products":[{"vendor":"kerio","product":"kerio_mailserver"},{"vendor":"kerio","product":"personal_firewall"},{"vendor":"kerio","product":"winroute_firewall"}],"references":[{"url":"http://research.tic.udc.es/scg/advisories/20050429-1.txt","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/397221","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.kerio.com/security_advisory.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1062"},{"url":"https://github.com/advisories/GHSA-p2g2-c24h-84cp"}],"sources":{"cve":[{"id":"CVE-2005-1062","description":"The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to quickly obtain passwords that are 5 characters or less via brute force methods.","status":"published","published":"2005-04-29T04:00:00Z","modified":"2024-08-07T21:35:59.962Z","updated_at":"2026-11-02T14:33:40.245652Z"}],"euvd":[{"id":"EUVD-2005-1065","description":"The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to quickly obtain passwords that are 5 characters or less via brute force methods.","status":"published","published":"2005-04-29T04:00:00Z","modified":"2024-08-07T21:35:59Z","updated_at":"2026-11-03T01:15:35.414401Z"}],"ghsa":[{"id":"GHSA-p2g2-c24h-84cp","title":"The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x...","description":"The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to quickly obtain passwords that are 5 characters or less via brute force methods.","status":"published","published":"2022-05-01T01:55:09Z","modified":"2023-01-30T05:07:03Z","updated_at":"2026-11-02T14:47:37.414363Z"}],"nvd":[{"id":"CVE-2005-1062","description":"The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to quickly obtain passwords that are 5 characters or less via brute force methods.","status":"published","published":"2005-05-02T04:00:00Z","modified":"2026-06-16T22:12:21.817Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:55.266741Z"}]}}