PT-2005-3863 · Sybari · Sybari Antigen

Alan G. Monaghan · Publicado 2005-09-21 · Atualizado 2017-07-11 · CVE-2005-3027

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Sybari Antigen version 8.0 SR2

Description The issue allows remote attackers to bypass custom filter rules and send file attachments of arbitrary file types via a message with a subject of "Antigen forwarded attachment". This occurs because Sybari Antigen 8.0 SR2 does not properly filter SMTP messages.

Recommendations For Sybari Antigen version 8.0 SR2, consider implementing additional filtering rules to restrict file attachments based on type to mitigate the risk of exploitation. As a temporary workaround, restrict the ability to send messages with subjects that could bypass existing filter rules.

Correção

Identificadores relacionados

CVE-2005-3027

Produtos afetados

Sybari Antigen

Referências · 7

• http://marc.info/?l=bugtraq&m=112714679622107&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22327 · Nota
• http://securitytracker.com/id?1014934 · Nota
• http://secunia.com/advisories/16759 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-3027 · Nota de Segurança
• http://securityreason.com/securityalert/15 · Nota
• http://securityfocus.com/bid/14875 · Correção