CVE-2011-1506

MEDIO 6.8CVE-2011-1506 · Published 22/03/2011 · updated 16/06/2026

In breve

CVE-2011-1506 è una vulnerabilità MEDIO (CVSS 6.8) che riguarda connect (kerio), kerio mailserver (kerio).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.5%, superiore al 84.5% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
connect kerio	`= 7.1.4`	No fix yet
kerio mailserver kerio	`= 5.0= 5.1= 5.1.1= 5.6.3= 5.6.4= 5.6.5= 5.7.0= 5.7.1= 5.7.10= 5.7.2= 5.7.3= 5.7.4= 5.7.5= 5.7.6= 5.7.7= 5.7.8= 5.7.9= 6.0= 6.0.0= 6.0.1= 6.0.10= 6.0.2= 6.0.3= 6.0.4= 6.0.5= 6.0.6= 6.0.7= 6.0.8= 6.0.9= 6.1.1= 6.1.2= 6.1.3= 6.1.3_patch_1= 6.1.4= 6.2.0= 6.2.1= 6.2.2= 6.3.0= 6.3.1= 6.3.1_p1= 6.3.1_p2= 6.4.0= 6.4.1= 6.4.2= 6.5.0= 6.5.1= 6.5.2= 6.6.0= 6.6.1= 6.6.2= 6.7.0= 6.7.1= 6.7.2= 6.7.3`	No fix yet

Description

The STARTTLS implementation in Kerio Connect 7.1.4 build 2985 and MailServer 6.x does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411. NOTE: some of these details are obtained from third party information.

References

secunia.com/advisories/43678 · Vendor Advisory
kb.cert.org/vuls/id/555316 · US Government Resource
kb.cert.org/vuls/id/MAPG-8D9M4P · US Government Resource
securityfocus.com/bid/46767
vupen.com/english/advisories/2011/0610 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/65932

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free