CVE-2008-3177: Medium severity sophos email appliance vulnerability
Sophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure Message for Unix, and Sophos Anti-Virus Interface (SAVI), allows remote attackers to cause a denial of service (engine crash) via zero-length MIME attachments.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3177?
CVE-2008-3177 is classified as a denial of service vulnerability that can cause the Sophos virus detection engine to crash.
How do I fix CVE-2008-3177?
To fix CVE-2008-3177, you should upgrade to a patched version of the Sophos antivirus software that addresses this vulnerability.
Which software is affected by CVE-2008-3177?
CVE-2008-3177 affects Sophos Email Appliance, Sophos ES1000, Sophos ES4000, Sophos Anti-Virus, and Sophos PureMessage Anti-virus.
Who can exploit CVE-2008-3177?
CVE-2008-3177 can be exploited by remote attackers through the sending of zero-length MIME attachments.
What is the impact of CVE-2008-3177 on system performance?
The impact of CVE-2008-3177 is a denial of service that can lead to a system crash, thereby affecting service availability.