PT-2009-2372 · Sophos · Sophos Small Business Solutions+7

Jonathan Brossard · Published 2009-08-06 · Updated 2009-08-19 · CVE-2008-6903

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Sophos Anti-Virus for Windows versions prior to 7.6.3 Sophos Anti-Virus for Windows NT/9x versions prior to 4.7.18 Sophos Anti-Virus for OS X versions prior to 4.9.18 Sophos Anti-Virus for Linux versions prior to 6.4.5 Sophos Anti-Virus for UNIX versions prior to 7.0.5 Sophos Anti-Virus for Unix and Netware versions prior to 4.37.0 Sophos EM Library (affected versions not specified) Sophos small business solutions (affected versions not specified)

Description: The issue allows remote attackers to cause a denial of service via a "fuzzed" CAB archive file. This can be demonstrated by the OUSPG PROTOS GENOME test suite for Archive Formats. The problem occurs when CAB archive scanning is enabled.

Recommendations: For Sophos Anti-Virus for Windows versions prior to 7.6.3, update to version 7.6.3 or later. For Sophos Anti-Virus for Windows NT/9x versions prior to 4.7.18, update to version 4.7.18 or later. For Sophos Anti-Virus for OS X versions prior to 4.9.18, update to version 4.9.18 or later. For Sophos Anti-Virus for Linux versions prior to 6.4.5, update to version 6.4.5 or later. For Sophos Anti-Virus for UNIX versions prior to 7.0.5, update to version 7.0.5 or later. For Sophos Anti-Virus for Unix and Netware versions prior to 4.37.0, update to version 4.37.0 or later. For Sophos EM Library and Sophos small business solutions, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2008-6903

Affected Products

Sophos Anti-Virus For Linux

Sophos Anti-Virus For Os X

Sophos Anti-Virus For Unix

Sophos Anti-Virus For Unix/Netware

Sophos Anti-Virus For Windows

Sophos Anti-Virus For Windows Nt/9X

Sophos Em Library

Sophos Small Business Solutions

References · 10

• http://ivizsecurity.com/security-advisory-iviz-sr-08015.html · Patch
• http://securitytracker.com/id?1021476 · Patch
• http://sophos.com/support/knowledgebase/article/50611.html · Vendor Advisory
• http://secunia.com/advisories/33177 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-6903 · Security Note
• http://vupen.com/english/advisories/2008/3458 · Vendor Advisory
• http://securityfocus.com/bid/32748 · Note
• http://cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html · Note
• http://osvdb.org/50863 · Note
• http://marc.info/?l=bugtraq&m=122893252316489&w=2 · Note