PT-2007-3040 · Barracuda · Barracuda Spam Firewall
Published
2007-05-09
·
Updated
2024-06-15
·
CVE-2007-1669
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions:
zoo decoder version 2.10
Barracuda Spam Firewall versions 3.4 and later with virusdef before 2.0.6399
Spam Firewall versions prior to 3.4 20070319 with virusdef before 2.0.6399
AMaViS versions 2.4.1 and earlier
Description:
The issue allows remote attackers to cause a denial of service, resulting in an infinite loop. This can be achieved by using a ZOO archive with a direntry structure that points to a previous file.
Recommendations:
For zoo decoder version 2.10, update to a version that is not affected by this issue.
For Barracuda Spam Firewall versions 3.4 and later, update virusdef to version 2.0.6399 or later.
For Spam Firewall versions prior to 3.4 20070319, update to version 3.4 20070319 or later and ensure virusdef is updated to version 2.0.6399 or later.
For AMaViS versions 2.4.1 and earlier, update to a version later than 2.4.1.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Barracuda Spam Firewall