Antigen 8.0 for Exchange/SMTP Rule Vulnerability

2005.09.19
Risk: Medium
Local: No
Remote: Yes
CWE: N/A


Ogólna skala CVSS: 5/10
Znaczenie: 2.9/10
Łatwość wykorzystania: 10/10
Wymagany dostęp: Zdalny
Złożoność ataku: Niska
Autoryzacja: Nie wymagana
Wpływ na poufność: Brak
Wpływ na integralność: Częściowy
Wpływ na dostępność: Brak

====================================================================== - Sybari Antigen for SMTP / Exchange Rule / Attachment Pass through - ====================================================================== 1) Affected Software Sybari Antigen v8.0 SR2 for Exchange/SMTP Other versions may also be affected. ====================================================================== 2) Description of Vulnerability A vulnerability has been discovered in Antigen for Exchange/SMTP, which could potentially be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused by the way Antigen processes its rules in handling SMTP messages. A message, containing the Subject line of: "Antigen forwarded attachment" can be exploited to cause Antigen to ignore custom filters allowing unwanted file attachments into the email system. This vulnerability does not disable or bypass virus scanning of attachments. Successful exploitation may allow an unwanted file type to be delivered into a user's email inbox. ====================================================================== 3) Solution Update to the latest version via online update. (Antigen v8.0 sr3 for Exchange/SMTP Version 8.00.1517 SR3). ====================================================================== 4) Credits Reported by Alan G. Monaghan, Gardner Publications, Inc. on Thursday, September 01, 2005


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2024, cxsecurity.com

 

Back to Top