Vulnerabilities > CVE-2007-1669 - Remote Denial of Service vulnerability in Multiple Vendors Zoo Compression Algorithm

CVSS 7.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

COMPLETE

network

low complexity

barracuda-networks

amavis

NVD

Published: 2007-05-09

Updated: 2018-10-16

Summary

zoo decoder 2.10 (zoo-2.10), as used in multiple products including (1) Barracuda Spam Firewall 3.4 and later with virusdef before 2.0.6399, (2) Spam Firewall before 3.4 20070319 with virusdef before 2.0.6399o, and (3) AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.

Vulnerable Configurations

Part	Description	Count
Hardware	Barracuda_Networks Barracuda Networks Barracuda Spam Firewall 3.1.17 Barracuda Networks Barracuda Spam Firewall 3.1.18 Barracuda Networks Barracuda Spam Firewall 3.3.0.54 Barracuda Networks Barracuda Spam Firewall 3.3.01.001 Barracuda Networks Barracuda Spam Firewall 3.3.3 Barracuda Networks Barracuda Spam Firewall 3.3.03.053 Barracuda Networks Barracuda Spam Firewall 3.3.03.055 Barracuda Networks Barracuda Spam Firewall 3.3.15.026 Barracuda Networks Barracuda Spam Firewall 3.4	9
Application	Amavis Amavis Amavis *	1

Summary

Vulnerable Configurations

References