 |
|
|
|
Secunia Advisory: SA16733
Release Date: 2005-09-07
Critical:
Moderately critical
Impact: DoS
Where: From remote
Solution Status: Vendor Patch
Software: Symantec Brightmail AntiSpam 6.x
Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it.
Description:
Two vulnerabilities have been reported in Brightmail, which potentially can be exploited by malicious people to cause a DoS (Denial of Service).
1) An error in the antivirus when scanning or cleaning certain messages (e.g. containing deeply nested zip files) may be exploited to cause the antivirus to process the messages for an extended period of time.
2) An error in the decomposer when processing messages containing winmail.dat objects embedded in a MIME file may be exploited to crash the decomposer.
The vulnerabilities have been reported in version 6.0.2.
Solution:
Apply patch 157.
ftp://ftp.symantec.com/public/en...sba/sba_60x/updates/patch157.zip
Provided and/or discovered by:
Reported by vendor.
Original Advisory:
ftp://ftp.symantec.com/public/en...x/updates/release_notes_p157.txt
|
|
|
|
|
|
|
|
