Clearswift MIMEsweeper For SMTP Unspecified PDF File Handling Remote Denial Of Service Vulnerability

Bugtraq ID:	11874
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Dec 10 2004 12:00AM
Updated:	Dec 10 2004 12:00AM
Credit:	This vulnerability was announced by the vendor.
Vulnerable:	Clearswift MIMEsweeper for SMTP 5.0.5 Clearswift MIMEsweeper for SMTP 5.0
Not Vulnerable:

Clearswift MIMEsweeper For SMTP Unspecified PDF File Handling Remote Denial Of Service Vulnerability

Clearswift MIMEsweeper For SMTP is reported prone to a remote denial of service vulnerability. The details of this vulnerability are unspecified, however it is reported that when the affected software performs format analysis on a specially crafted PDF file attachment the Security Service will crash.

A remote attacker may exploit this vulnerability to crash the Security Service on a remote Clearswift MIMEsweeper For SMTP installation.

Clearswift MIMEsweeper For SMTP Unspecified PDF File Handling Remote Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Clearswift MIMEsweeper For SMTP Unspecified PDF File Handling Remote Denial Of Service Vulnerability

Solution:
The vendor has released MIMEsweeper for SMTP 5.0 Service Pack 1 to address this and other issues:


Clearswift MIMEsweeper for SMTP 5.0

• Clearswift MIMEsweeper for SMTP 5.0 SP1
  A valid support account is required to retrieve the service pack.
  http://www.clearswift.com/download/info.aspx?ID=562

Clearswift MIMEsweeper for SMTP 5.0.5

• Clearswift MIMEsweeper for SMTP 5.0 SP1
  A valid support account is required to retrieve the service pack.
  http://www.clearswift.com/download/info.aspx?ID=562

Clearswift MIMEsweeper For SMTP Unspecified PDF File Handling Remote Denial Of Service Vulnerability

References:

• MIMEsweeper for SMTP 5.0 SP1 (Clearswift)