CVE-2008-3177
Medium
Description
Sophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure Message for Unix, and Sophos Anti-Virus Interface (SAVI), allows remote attackers to cause a denial of service (engine crash) via zero-length MIME attachments.
SeverityMedium
CVSS5.0
Exploit probability—
Product
Sophos Anti-virus
PublishedJul 15, 2008
First seenJul 15, 2008
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sophos sophos_anti-virus | No range specified | — |
| sophos es1000 | No range specified | — |
| sophos es4000 | No range specified | — |
| sophos sophos_puremessage_anti-virus | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.