PT-2009-2575 · Sophos+1 · Sophos Puremessage For Microsoft Exchange+1

Published 2009-08-27 · Updated 2017-08-17 · CVE-2008-7106

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Sophos PureMessage for Microsoft Exchange version 3.0 before 3.0.2

Description The issue affects the installation of Sophos PureMessage for Microsoft Exchange when both anti-virus and anti-spam are supported. Under heavy system load, the associated scan engines are not created or launched, potentially leading to a remote bypass of scanner protection or a denial of service, which could result in message loss or delay.

Recommendations For Sophos PureMessage for Microsoft Exchange version 3.0 before 3.0.2, update to version 3.0.2 or later to resolve the issue.

Fix

Related Identifiers

CVE-2008-7106

Affected Products

Exchange Server

Sophos Puremessage For Microsoft Exchange

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2008-7106 · Security Note
• http://sophos.com/support/knowledgebase/article/44385.html · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52926 · Note