PT-2007-3040 · Barracuda · Barracuda Spam Firewall
Publicado
2007-05-09
·
Atualizado
2024-06-15
·
CVE-2007-1669
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions:
zoo decoder version 2.10
Barracuda Spam Firewall versions 3.4 and later with virusdef before 2.0.6399
Spam Firewall versions prior to 3.4 20070319 with virusdef before 2.0.6399
AMaViS versions 2.4.1 and earlier
Description:
The issue allows remote attackers to cause a denial of service, resulting in an infinite loop. This can be achieved by using a ZOO archive with a direntry structure that points to a previous file.
Recommendations:
For zoo decoder version 2.10, update to a version that is not affected by this issue.
For Barracuda Spam Firewall versions 3.4 and later, update virusdef to version 2.0.6399 or later.
For Spam Firewall versions prior to 3.4 20070319, update to version 3.4 20070319 or later and ensure virusdef is updated to version 2.0.6399 or later.
For AMaViS versions 2.4.1 and earlier, update to a version later than 2.4.1.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Barracuda Spam Firewall