Sophos MailMonitor for SMTP Unspecified Email Handling Vulnerability

Bugtraq ID:	11607
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Nov 05 2004 12:00AM
Updated:	Nov 05 2004 12:00AM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	Sophos MailMonitor for SMTP 2.1
Not Vulnerable:

Sophos MailMonitor for SMTP Unspecified Email Handling Vulnerability

Sophos MailMonitor for SMTP is reported prone to an unspecified vulnerability. It is reported that this issue presents itself when the application handles malformed email messages. The impact of this issue was not specified.

Sophos MailMonitor for SMTP version 2.1 is reportedly vulnerable. It is possible that other versions may be affected as well.

Sophos MailMonitor for SMTP Unspecified Email Handling Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sophos MailMonitor for SMTP Unspecified Email Handling Vulnerability

Solution:
The vendor has released updates for MailMonitor for SMTP 2.1 to address this issue.


Sophos MailMonitor for SMTP 2.1

• Sophos mmsmtp-linux-update.tar.gz
  Update for Linux platform.
  http://www.sophos.com/sophos/products/full/mmsmtp-linux-update.tar.gz


• Sophos mmsmtp-solaris-update.tar.Z
  Update for Solaris platform.
  http://www.sophos.com/sophos/products/full/mmsmtp-solaris-update.tar.Z

Sophos MailMonitor for SMTP Unspecified Email Handling Vulnerability

References:

• MailMonitor for SMTP - Unix, malformed email security issue with version 2.1 (Sophos)
  
• MailMonitor Product Page (Sophos)