[security-alerts] FW: [SA25578] Amavis file Integer Underflow and Denial of Service

["Kazennov, Vladimir" <Vladimir.Kazennov@xxxxxxxxxx>]

> ----------------------------------------------------------------------
> 
> TITLE:
> Amavis file Integer Underflow and Denial of Service
> 
> SECUNIA ADVISORY ID:
> SA25578
> 
> VERIFY ADVISORY:
> http://secunia.com/advisories/25578/
> 
> CRITICAL:
> Highly critical
> 
> IMPACT:
> DoS, System access
> 
> WHERE:
> From remote
> 
> SOFTWARE:
> AMaViS (A Mail Virus Scanner) 0.x
> http://secunia.com/product/2468/
> amavisd-new 2.x
> http://secunia.com/product/4492/
> 
> DESCRIPTION:
> A vulnerability and a security issue have been reported in Amavis,
> which can be exploited by malicious people to cause a DoS (Denial of
> Service) or potentially to compromise a vulnerable system.
> 
> 1) An integer underflow error in the "file" utility can be exploited
> to cause a heap-based buffer overflow.
> 
> For more information:
> SA24548
> 
> 2) The problem is caused due to certain regular expressions in
> "file", which can consume all available CPU resources when
> identifying a specially crafted file.
> 
> For more information:
> SA24918
> 
> SOLUTION:
> The vendor recommends updating to file version 4.21 or later and
> editing the "magic" file (see vendor advisory for details).
> 
> PROVIDED AND/OR DISCOVERED BY:
> Reported by the vendor.
> 
> ORIGINAL ADVISORY:
> http://www.amavis.org/security/asa-2007-3.txt
> 
> OTHER REFERENCES:
> SA24548:
> http://secunia.com/advisories/24548/
> 
> SA24918:
> http://secunia.com/advisories/24918/
>