sophos Archives - CVE Vulnerability

CVE-2008-7104

Sun, 26 Feb 2023 09:11:51 +0000

Sophos PureMessage Scanner service (PMScanner.exe) in PureMessage for Microsoft Exchange 3.0 before 3.0.2 allows remote attackers to cause a denial of service (message queue delay and incomplete spam rule update) via a crafted (1) RTF or (2) PDF file.

The post CVE-2008-7104 appeared first on CVE Vulnerability.

CVE-2008-7105

Sun, 26 Feb 2023 09:11:51 +0000

Sophos PureMessage for Microsoft Exchange 3.0 before 3.0.2 allows remote attackers to cause a denial of service (EdgeTransport.exe termination) via a TNEF-encoded message with a crafted rich text body that is not properly handled during conversion to plain text. NOTE: this might be related to CVE-2008-7104.

The post CVE-2008-7105 appeared first on CVE Vulnerability.

CVE-2008-7106

Sun, 26 Feb 2023 09:11:51 +0000

The installation of Sophos PureMessage for Microsoft Exchange 3.0 before 3.0.2, when both anti-virus and anti-spam are supported, does not create or launch the associated scan engines when the system is under heavy load, which has unspecified impact, probably remote bypass of scanner protection or a denial of service (message loss or delay).

The post CVE-2008-7106 appeared first on CVE Vulnerability.

CVE-2008-6903

Sun, 26 Feb 2023 09:11:46 +0000

Sophos Anti-Virus for Windows before 7.6.3, Anti-Virus for Windows NT/9x before 4.7.18, Anti-Virus for OS X before 4.9.18, Anti-Virus for Linux before 6.4.5, Anti-Virus for UNIX before 7.0.5, Anti-Virus for Unix and Netware before 4.37.0, Sophos EM Library, and Sophos small business solutions, when CAB archive scanning is enabled, allows remote attackers to cause a denial of service (segmentation fault) via a “fuzzed” CAB archive file, as demonstrated by the OUSPG PROTOS GENOME test suite for Archive Formats.

The post CVE-2008-6903 appeared first on CVE Vulnerability.

CVE-2008-6904

Sun, 26 Feb 2023 09:11:46 +0000

Multiple unspecified vulnerabilities in Sophos SAVScan 4.33.0 for Linux, and possibly other products and versions, allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via crafted files that have been packed with (1) armadillo, (2) asprotect, or (3) asprotectSKE.

The post CVE-2008-6904 appeared first on CVE Vulnerability.

CVE-2008-3177

Sun, 26 Feb 2023 09:09:53 +0000

Sophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure Message for Unix, and Sophos Anti-Virus Interface (SAVI), allows remote attackers to cause a denial of service (engine crash) via zero-length MIME attachments.

The post CVE-2008-3177 appeared first on CVE Vulnerability.

CVE-2020-9363

Sun, 26 Feb 2023 06:43:43 +0000

The Sophos AV parsing engine before 2020-01-14 allows virus-detection bypass via a crafted ZIP archive. This affects Endpoint Protection, Cloud Optix, Mobile, Intercept X Endpoint, Intercept X for Server, and Secure Web Gateway. NOTE: the vendor feels that this does not apply to endpoint-protection products because the virus would be detected upon extraction.

The post CVE-2020-9363 appeared first on CVE Vulnerability.

CVE-2020-29574

Sun, 26 Feb 2023 06:40:59 +0000

An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows unauthenticated attackers to execute arbitrary SQL statements remotely.

The post CVE-2020-29574 appeared first on CVE Vulnerability.

CVE-2020-10947

Sun, 26 Feb 2023 06:36:01 +0000

Mac Endpoint for Sophos Central before 9.9.6 and Mac Endpoint for Sophos Home before 2.2.6 allow Privilege Escalation.

The post CVE-2020-10947 appeared first on CVE Vulnerability.

CVE-2019-17059

Sun, 26 Feb 2023 06:31:27 +0000

A shell injection vulnerability on the Sophos Cyberoam firewall appliance with CyberoamOS before 10.6.6 MR-6 allows remote attackers to execute arbitrary commands via the Web Admin and SSL VPN consoles.

The post CVE-2019-17059 appeared first on CVE Vulnerability.