Vulnerabilities > CVE-2008-3177 - Configuration vulnerability in Sophos products

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
low complexity
sophos
CWE-16
NVD
Published: 2008-07-15
Updated: 2017-08-08

Summary

Sophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure Message for Unix, and Sophos Anti-Virus Interface (SAVI), allows remote attackers to cause a denial of service (engine crash) via zero-length MIME attachments.

Vulnerable Configurations

Part Description Count
Hardware
Sophos
2
Application
Sophos
4

Common Weakness Enumeration (CWE)

References