Symantec Brightmail AntiSpam Quarantine Multiple Remote Denial of Service Vulnerabilities
BID:12063
Info
Symantec Brightmail AntiSpam Quarantine Multiple Remote Denial of Service Vulnerabilities
| Bugtraq ID: | 12063 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 21 2004 12:00AM |
| Updated: | Dec 21 2004 12:00AM |
| Credit: | The individual or individuals responsible for the discovery of this issue are currently unknown; the vendor disclosed this issue. |
| Vulnerable: |
Symantec Brightmail Anti-Spam 6.0.1 Symantec Brightmail Anti-Spam 6.0 |
| Not Vulnerable: | |
Discussion
Symantec Brightmail AntiSpam Quarantine Multiple Remote Denial of Service Vulnerabilities
Multiple remote denial of service vulnerabilities affect the Quarantine component of Symantec's Brightmail AntiSpam. These issues are due to a failure of the application to properly handle quarantined mail notifications and exceptional conditions in message processing.
The first issue arises when an excessively large number of spam messages are held in a user's Quarantine folder. The second issue presents itself when the Notifier encounters SMTP errors during notifications.
An attacker may leverage these issues to cause the affected component to crash, disabling spam notifications and potentially allowing spam to bypass the filtering process.
Multiple remote denial of service vulnerabilities affect the Quarantine component of Symantec's Brightmail AntiSpam. These issues are due to a failure of the application to properly handle quarantined mail notifications and exceptional conditions in message processing.
The first issue arises when an excessively large number of spam messages are held in a user's Quarantine folder. The second issue presents itself when the Notifier encounters SMTP errors during notifications.
An attacker may leverage these issues to cause the affected component to crash, disabling spam notifications and potentially allowing spam to bypass the filtering process.
Exploit / POC
Symantec Brightmail AntiSpam Quarantine Multiple Remote Denial of Service Vulnerabilities
No exploit is required to leverage these issues.
No exploit is required to leverage these issues.
Solution / Fix
Symantec Brightmail AntiSpam Quarantine Multiple Remote Denial of Service Vulnerabilities
Solution:
Symantec has released Patch 138 dealing with these issues.
Symantec Brightmail Anti-Spam 6.0.1
Solution:
Symantec has released Patch 138 dealing with these issues.
Symantec Brightmail Anti-Spam 6.0.1
References
Symantec Brightmail AntiSpam Quarantine Multiple Remote Denial of Service Vulnerabilities
References:
References: