Symantec Mail Security For SMTP Remote Denial Of Service Vulnerability

Bugtraq ID:	24625
Class:	Boundary Condition Error
CVE:	CVE-2007-1792
Remote:	Yes
Local:	No
Published:	Jun 26 2007 12:00AM
Updated:	May 07 2015 05:37PM
Credit:	Dyon Balding of Secunia is credited with the discovery of this issue.
Vulnerable:	Symantec Mail Security for SMTP 5.0.1 Symantec Mail Security for SMTP 5.0 Symantec Mail Security Appliance 5.0
Not Vulnerable:	Symantec Mail Security for SMTP 5.0.1 Patch 181 Symantec Mail Security Appliance 5.0.0-36

Symantec Mail Security For SMTP Remote Denial Of Service Vulnerability

Symantec Mail Security for SMTP is prone to a remote denial-of-service vulnerability when parsing certain attachments.

An attacker can exploit this issue to cause denial-of-service conditions.

These versions are vulnerable:

Symantec Mail Security for SMTP 5.0 series prior to 5.01 Patch 181
Symantec Mail Security Appliance 5.0 series prior to 5.0.0-36

Symantec Mail Security For SMTP Remote Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Symantec Mail Security For SMTP Remote Denial Of Service Vulnerability

Solution:
Symantec has released a security advisory and fixes to address this issue. Please see the references for more information.

Symantec Mail Security For SMTP Remote Denial Of Service Vulnerability

References:

• FileConnect (Symantec)
  
• Platinum Support Web Site (Symantec)
  
• Symantec Mail Security for SMTP (Symantec)
  
• SYM07-014: Symantec Mail Security for SMTP Executable Attachment Parsing Denial (Symantec)