PT-2003-2422 · Clearswift · Mailsweeper For Smtp

Publicado 2003-12-31 · Atualizado 2017-07-29 · CVE-2003-1477

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions MAILsweeper for SMTP versions 4.3.6 through 4.3.7

Description The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by sending a PowerPoint attachment. This attachment can either be corrupt or contain embedded objects, triggering the denial of service.

Recommendations For versions 4.3.6 and 4.3.7, consider restricting the handling of PowerPoint attachments with embedded objects or corrupt files until a fix is available. As a temporary workaround, disabling the processing of such attachments can help minimize the risk of CPU consumption denial of service attacks.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2003-1477

Produtos afetados

Mailsweeper For Smtp

Referências · 4

• http://securityfocus.com/bid/7562 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12052 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1477 · Nota de Segurança
• http://clearswift.com/download/bin/Patches/ReadMe_SMTP_438.htm · Nota