CVE-2007-1669

Published: May 9, 2007Modified: Apr 23, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

zoo decoder 2.10 (zoo-2.10), as used in multiple products including (1) Barracuda Spam Firewall 3.4 and later with virusdef before 2.0.6399, (2) Spam Firewall before 3.4 20070319 with virusdef before 2.0.6399o, and (3) AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.

Affected (1)

Products: Amavis: Amavis

1 product

Configuration A

1 vulnerable · 9 platform

Vulnerable Software	Affected Versions
Amavis Amavis	Up to 2.4.1

Running on/with	Platform Versions
Barracuda Networks Barracuda Spam Firewall	Version 3.1.17
Barracuda Networks Barracuda Spam Firewall	Version 3.1.18
Barracuda Networks Barracuda Spam Firewall	Version 3.3.0.54
Barracuda Networks Barracuda Spam Firewall	Version 3.3.01.001
Barracuda Networks Barracuda Spam Firewall	Version 3.3.03.053
Barracuda Networks Barracuda Spam Firewall	Version 3.3.03.055
Barracuda Networks Barracuda Spam Firewall	Version 3.3.15.026
Barracuda Networks Barracuda Spam Firewall	Version 3.3.3
Barracuda Networks Barracuda Spam Firewall	Version 3.4

References (20)

http://secunia.com/advisories/25122

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/25315

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/2680

Source: cve@mitre.org

http://www.amavis.org/security/asa-2007-2.txt

Source: cve@mitre.org

http://www.attrition.org/pipermail/vim/2007-July/001725.html

Source: cve@mitre.org

http://www.osvdb.org/35795

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/467646/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/23823

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2007/1699

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/34080

Source: cve@mitre.org

http://secunia.com/advisories/25122

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/25315

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securityreason.com/securityalert/2680

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.amavis.org/security/asa-2007-2.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.attrition.org/pipermail/vim/2007-July/001725.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/35795

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/467646/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/23823

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.vupen.com/english/advisories/2007/1699

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/34080

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.