Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Kerio Winroute Firewall before 6.0.9, ServerFirewall before 1.0.1, and MailServer before 6.0.5, when installed on Windows based systems, do not modify the ACLs for critical files, which allows local users with Power Users privileges to modify programs, install malicious DLLs in the plug-ins folder, and modify XML files related to configuration.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Kerio 多个软件 弱安全机制漏洞
Vulnerability Description
Kerio是一家安全软件公司，提供多种安全软件。 Kerio Winroute Firewall 6.0.9之前、ServerFirewall 1.0.1之前以及MailServer 6.0.5之前的版本中存在弱安全机制漏洞。 当安装在基于Windows的系统上时，上述软件不会修改重要文件的ACL，这使得具有管理员权限的本地用户可以修改程序、在plug-ins文件夹中安装恶意DLL，以及修改与配置相关的XML文件。
CVSS Information
N/A
Vulnerability Type
N/A