Amavis vulnerabilities
4 vulnerabilities
Known vulnerabilities in Amavis products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Amavis2 vulnerabilities
- Virus Scanner2 vulnerabilities
CVE-2007-1673amavisamavis+10
EPSS score3.18%
unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.CVE-2007-1669amavisamavisEPSS score12.18%
zoo decoder 2.10 (zoo-2.10), as used in multiple products including (1) Barracuda Spam Firewall 3.4 and later with virusdef before 2.0.6399, (2) Spam Firewall before 3.4 20070319 with virusdef before 2.0.6399o, and (3) AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.CVE-1999-1512amavisvirus_scannerEPSS score5.14%
The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to execute arbitrary commands as root via an infected mail message with shell metacharacters in the reply-to field.CVE-2002-1109amavisvirus_scannerEPSS score0.36%
securetar, as used in AMaViS shell script 0.2.1 and earlier, allows users to cause a denial of service (CPU consumption) via a malformed TAR file, possibly via an incorrect file size parameter.