Lucene search

K
cve[email protected]CVE-2007-1673
HistoryMay 09, 2007 - 1:19 a.m.

CVE-2007-1673

2007-05-0901:19:00
CWE-399
web.nvd.nist.gov
17
unzoo.c
denial of service
remote attackers
zoo archive
cve-2007-1673
nvd
amavis 2.4.1

6.8 Medium

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.041 Low

EPSS

Percentile

92.1%

unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.

6.8 Medium

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.041 Low

EPSS

Percentile

92.1%