Sybari Antigen for Exchange/SMTP Attachment Rule Bypass Vulnerability

Bugtraq ID:	14875
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 19 2005 12:00AM
Updated:	Sep 19 2005 12:00AM
Credit:	Discovered by Alan G. Monaghan.
Vulnerable:	Sybari Antigen for SMTP Gateways 8.0 SR2 Sybari Antigen for Exchange 8.0 SR2
Not Vulnerable:

Sybari Antigen for Exchange/SMTP Attachment Rule Bypass Vulnerability

Sybari Antigen for Exchange/SMTP products are vulnerable to an attachment rule bypass vulnerability.

A successful attack may result in arbitrary attachments and unwanted content being delivered to users. It should be noted that this issue does not disable or bypass antivirus scanning of attachments.

Sybari Antigen v8.0 SR2 for Exchange and Sybari Antigen v8.0 SR2 for SMTP Gateways are reportedly vulnerable. Other versions may be affected as well.

Sybari Antigen for Exchange/SMTP Attachment Rule Bypass Vulnerability

An exploit is not required.

Sybari Antigen for Exchange/SMTP Attachment Rule Bypass Vulnerability

Solution:
The vendor has released Antigen 8.0 SR3 (8.00.1517 SR3) to address this issue. Users are advised to obtain the upgrade through the online update functionality of the application.

Sybari Antigen for Exchange/SMTP Attachment Rule Bypass Vulnerability

References:

• Home Page (Sybari)
  
• Antigen 8.0 for Exchange/SMTP Rule Vulnerability ("Alan Monaghan" )