Vulnerability in Surfcontrol Superscout Email Filter

CVE-2002-1532

The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (resource exhaustion) via a GET request without the terminating /r/n/r/n (CRLF) sequence, which causes the interface to wait for the sequence and blocks other users from accessing it.

EPSS: 0.026 (83.5th percentile) — read the EPSS interpretation.

Affected products

Surfcontrol Superscout_email_filter — versions 3.5, 3.5.1, 4.0
N/a — versions n/a

References

cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (Patch, vdb-entry, Vendor Advisory, x_refsource_XF)
cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ)