CVE-2006-5812
CVE-2006-5812 is a medium-severity vulnerability in Kerio Kerio Mailserver with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 2.0 base score 5.0)
- EPSS exploit prediction: 1% (68th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Kerio Kerio Mailserver
- Published:
- Last modified:
Description
Unspecified vulnerability in Kerio MailServer allows attackers to cause a denial of service, as demonstrated by vd_kms4.pm, a "Kerio MailServer DoS." NOTE: As of 20061108, this disclosure has no actionable information. However, since it is from a reliable researcher, it is being assigned a CVE identifier for tracking purposes.
Frequently asked questions
- What is CVE-2006-5812?
- Unspecified vulnerability in Kerio MailServer allows attackers to cause a denial of service, as demonstrated by vd_kms4.pm, a "Kerio MailServer DoS." NOTE: As of 20061108, this disclosure has no actionable information. However, since it is from a reliable researcher, it is being assigned a CVE identifier for tracking purposes.
- How severe is CVE-2006-5812?
- CVE-2006-5812 has a CVSS 2.0 base score of 5.0, rated medium severity.
- Is CVE-2006-5812 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (68th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2006-5812?
- CVE-2006-5812 affects Kerio Kerio Mailserver. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2006-5812?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2006-5812 published?
- CVE-2006-5812 was published on 2006-11-08 and last updated on 2026-06-16.
References
- http://gleg.net/vulndisco_meta.shtml
- http://secunia.com/advisories/22861
- http://securitytracker.com/id?1017171
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30145
Affected products (1)
- cpe:2.3:a:kerio:kerio_mailserver:*:*:*:*:*:*:*:*
More vulnerabilities in Kerio Kerio Mailserver
- CVE-2008-0860 — Critical (CVSS 10.0): Unspecified vulnerability in the AVG plugin in Kerio MailServer before 6.5.0 has unspecified impact via unknown remote…
- CVE-2007-3993 — Critical (CVSS 10.0): Unspecified vulnerability in the attachment filter in Kerio MailServer before 6.4.1 has unknown impact and remote…
- CVE-2004-2441 — Critical (CVSS 10.0): Unspecified vulnerability in Kerio MailServer before 6.0.3 has unknown impact and unknown remote attack vectors,…
- CVE-2006-1158 — High (CVSS 7.8): Kerio MailServer before 6.1.3 Patch 1 allows remote attackers to cause a denial of service (application crash) via a…
- CVE-2008-0858 — High (CVSS 7.5): Buffer overflow in the Visnetic anti-virus plugin in Kerio MailServer before 6.5.0 might allow remote attackers to…
- CVE-2005-1062 — High (CVSS 7.5): The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and…