[security-alerts] FW: [SA24371] Symantec Mail Security for SMTP Unspecified Message Handling Vulnerability

["Kazennov, Vladimir" <Vladimir.Kazennov@xxxxxxxxxx>]

> ----------------------------------------------------------------------
> 
> TITLE:
> Symantec Mail Security for SMTP Unspecified Message Handling
> Vulnerability
> 
> SECUNIA ADVISORY ID:
> SA24371
> 
> VERIFY ADVISORY:
> http://secunia.com/advisories/24371/
> 
> CRITICAL:
> Highly critical
> 
> IMPACT:
> DoS, System access
> 
> WHERE:
> From remote
> 
> SOFTWARE:
> Symantec Mail Security for SMTP 5.x
> http://secunia.com/product/13591/
> 
> DESCRIPTION:
> A vulnerability has been reported in Symantec Mail Security for SMTP,
> which can be exploited by malicious people to cause a DoS (Denial of
> Service) and potentially compromise a vulnerable system.
> 
> The vulnerability is caused due to an unspecified error when handling
> certain specific messages and can be exploited to cause a crash and
> potentially allow execution of arbitrary code.
> 
> The vulnerability is reported in version 5.0 for Windows. Other
> versions may also be affected.
> 
> SOLUTION:
> Apply Patch 175.
> 
> PROVIDED AND/OR DISCOVERED BY:
> Steve Arvanitis
> 
> ORIGINAL ADVISORY:
> Symantec:
> ftp://ftp.symantec.com/public/english_us_canada/products/syman
> tec_mail_security/5.0_smtp/updates/release_notes_p175.txt
> 
> OTHER REFERENCES:
> US-CERT VU#875633:
> http://www.kb.cert.org/vuls/id/875633
> 
> ----------------------------------------------------------------------