PT-2002-2112 · Amavis · Amavis

Publicado 2002-10-04 · Atualizado 2016-10-18 · CVE-2002-1109

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: AMaViS shell script version 0.2.1 and earlier

Description: The issue allows users to cause a denial of service, specifically CPU consumption, by providing a malformed TAR file. This could potentially be achieved via an incorrect file size parameter.

Recommendations: For AMaViS shell script version 0.2.1 and earlier, consider validating TAR file formats to prevent malformed files from being processed, and implement measures to limit CPU consumption in case of incorrect file size parameters. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2002-1109

Produtos afetados

Amavis

Referências · 4

• http://iss.net/security_center/static/10056.php · Aviso do Fabricante
• http://marc.info/?l=amavis-announce&m=103121272122242&w=2 · Nota
• http://marc.info/?l=bugtraq&m=103124270321404&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1109 · Nota de Segurança