CVE-2008-3177 - Vulnerability Details - OpenCVE

Sophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure Message for Unix, and Sophos Anti-Virus Interface (SAVI), allows remote attackers to cause a denial of service (engine crash) via zero-length MIME attachments.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.06048.

Key SSVC decision points have not yet been added.

Vendors	Products
Sophos	Email Appliance Es1000 Es4000 Sophos Anti-virus Sophos Puremessage Anti-virus

Configuration 1 [-]

AND

OR	cpe:2.3:h:sophos:email_appliance:es1000:::::::*
	cpe:2.3:h:sophos:email_appliance:es4000:::::::*

OR	cpe:2.3:a:sophos:es1000::::::::
	cpe:2.3:a:sophos:es4000::::::::
	cpe:2.3:a:sophos:sophos_anti-virus::::::::
	cpe:2.3:a:sophos:sophos_puremessage_anti-virus::::::::

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2008-3167	Sophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure Message for Unix, and Sophos Anti-Virus Interface (SAVI), allows remote attackers to cause a denial of service (engine crash) via zero-length MIME attachments.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://secunia.com/advisories/31037
http://www.securityfocus.com/bid/30110
http://www.securitytracker.com/id?1020462
http://www.sophos.com/support/knowledgebase/article/42245.html?_log_from=rss
http://www.vupen.com/english/advisories/2008/2053/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/43703

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2008-07-15T18:03:00

Updated: 2024-08-07T09:28:41.794Z

Reserved: 2008-07-15T00:00:00

Link: CVE-2008-3177

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2008-07-15T18:41:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2008-3177

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2008-07-09T00:00:00", "descriptions": [{"lang": "en", "value": "Sophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure Message for Unix, and Sophos Anti-Virus Interface (SAVI), allows remote attackers to cause a denial of service (engine crash) via zero-length MIME attachments."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-07T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "1020462", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1020462"}, {"name": "30110", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/30110"}, {"name": "ADV-2008-2053", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2008/2053/references"}, {"name": "sophos-mime-dos(43703)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43703"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.sophos.com/support/knowledgebase/article/42245.html?_log_from=rss"}, {"name": "31037", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/31037"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2008-3177", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Sophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure Message for Unix, and Sophos Anti-Virus Interface (SAVI), allows remote attackers to cause a denial of service (engine crash) via zero-length MIME attachments."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "1020462", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1020462"}, {"name": "30110", "refsource": "BID", "url": "http://www.securityfocus.com/bid/30110"}, {"name": "ADV-2008-2053", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2008/2053/references"}, {"name": "sophos-mime-dos(43703)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43703"}, {"name": "http://www.sophos.com/support/knowledgebase/article/42245.html?_log_from=rss", "refsource": "CONFIRM", "url": "http://www.sophos.com/support/knowledgebase/article/42245.html?_log_from=rss"}, {"name": "31037", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/31037"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T09:28:41.794Z"}, "title": "CVE Program Container", "references": [{"name": "1020462", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1020462"}, {"name": "30110", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/30110"}, {"name": "ADV-2008-2053", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2008/2053/references"}, {"name": "sophos-mime-dos(43703)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43703"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.sophos.com/support/knowledgebase/article/42245.html?_log_from=rss"}, {"name": "31037", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/31037"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2008-3177", "datePublished": "2008-07-15T18:03:00", "dateReserved": "2008-07-15T00:00:00", "dateUpdated": "2024-08-07T09:28:41.794Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:sophos:email_appliance:es1000:*:*:*:*:*:*:*", "matchCriteriaId": "8B03E1F8-1ED6-40C5-A164-0581A75634F5", "vulnerable": false}, {"criteria": "cpe:2.3:h:sophos:email_appliance:es4000:*:*:*:*:*:*:*", "matchCriteriaId": "881E76E2-3049-49F1-B1FD-322BDBE3C1B8", "vulnerable": false}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:sophos:es1000:*:*:*:*:*:*:*:*", "matchCriteriaId": "9B7EE749-CA5F-4348-B39B-E8AA0E61EE0E", "vulnerable": true}, {"criteria": "cpe:2.3:a:sophos:es4000:*:*:*:*:*:*:*:*", "matchCriteriaId": "29C6192D-4E59-4663-9612-0286CD8AF9C3", "vulnerable": true}, {"criteria": "cpe:2.3:a:sophos:sophos_anti-virus:*:*:*:*:*:*:*:*", "matchCriteriaId": "6CCF6E5F-DF9F-4B6A-A826-1268E0EAD4FB", "vulnerable": true}, {"criteria": "cpe:2.3:a:sophos:sophos_puremessage_anti-virus:*:*:*:*:*:*:*:*", "matchCriteriaId": "E44BBA71-625A-4D39-A35F-A87EBE16C95C", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Sophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure Message for Unix, and Sophos Anti-Virus Interface (SAVI), allows remote attackers to cause a denial of service (engine crash) via zero-length MIME attachments."}, {"lang": "es", "value": "El motor de detecci\u00f3n de Sophos 2.75 en Linux y Unix, descubierto en Sophos Email Appliance, Pure Message para Unix y Sophos Anti-Virus Interface (SAVI), permite a los atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda del engine) a trav\u00e9s del adjunto MIME de longitud cero"}], "id": "CVE-2008-3177", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2008-07-15T18:41:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/31037"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/30110"}, {"source": "cve@mitre.org", "url": "http://www.securitytracker.com/id?1020462"}, {"source": "cve@mitre.org", "url": "http://www.sophos.com/support/knowledgebase/article/42245.html?_log_from=rss"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2008/2053/references"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43703"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/31037"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/30110"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id?1020462"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.sophos.com/support/knowledgebase/article/42245.html?_log_from=rss"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2008/2053/references"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43703"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-16"}], "source": "nvd@nist.gov", "type": "Primary"}]}