CVE-2004-1023: Kerio Winroute Firewall before 6.0.9, ServerFirewall before 1.0.1, and MailServer before 6.0.5, when instal...

Security readout for executives and security teams

This is a legacy Windows file-permission issue in Kerio security and mail products. Local users with Power Users rights could change program files, plug-ins, or configuration XML, potentially weakening firewall or mail protections. The provided sources do not show remote exploitation or active exploitation. Exposure is most likely on old Windows hosts still running the listed Kerio versions, especially where local non-admin users retain Power Users privileges. Internet-facing status alone does not establish exposure because the weakness requires local access. Treat this as a targeted legacy exposure check, not an emergency internet-wide issue. Prioritize it where Kerio products still protect mail or network traffic, because local tampering could undermine security controls. Mitigation focus: Upgrade affected Kerio products to versions at or above the fixed releases named in the CVE.; Review Kerio or successor-vendor guidance for any product-specific hardening instructions.; Remove unnecessary Power Users membership from Windows hosts running affected Kerio software..

Prepared

Jun 30, 2026, 01:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.