Kerio MailServer Attachment Filter Bug Lets Remote Users Deny Service

	Keep Track of the Latest Vulnerabilities with SecurityTracker!

SecurityTracker Alert ID: 1018453

SecurityTracker URL: http://securitytracker.com/id/1018453

CVE Reference: CVE-2007-3993 (Links to External Site)

Updated: Aug 3 2007

Original Entry Date: Jul 25 2007

Impact: Denial of service via network

Fix Available: Yes Vendor Confirmed: Yes

Version(s): after 6.3.1 patch2 and lower and prior to 6.4.1

Description: A vulnerability was reported in Kerio MailServer. A remote user can cause denial of service conditions.

A remote user can send a specially crafted e-mail message to cause the target mail service to crash.

The vulnerability resides in the attachment filter.

Version 6.3.1 patch2 and prior versions are not affected.

Impact: A remote user can cause the target service to crash.

Solution: The vendor has issued a fixed version (6.4.1).

The Kerio advisory is available at:

http://www.kerio.com/kms_history.html

Vendor URL: www.kerio.com/ (Links to External Site)

Cause: Not specified

Underlying OS: Windows (Any)

Message History: None.

Date: Wed, 25 Jul 2007 11:47:43 -0400
Subject: Kerio MailServer


http://www.kerio.com/kms_history.html

> Version 6.4.1 - July 24, 2007

> - Fixed potential security problem in attachment filter.