Secunia

Jean-Sébastien Guay-Leroux has reported two vulnerabilities in Barracuda Spam Firewall, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerabilities are caused due to boundary errors in the processing of LHA and ZOO archives containing files with overly long filenames. This can be exploited to cause a stack-based buffer overflow when an e-mail with a malicious archive is scanned.

These vulnerabilities are related to:
SA11510
SA19002

Successful exploitation allows execution of arbitrary code.

The vulnerabilities have been reported in firmware versions prior to 3.3.03.022.

Solution
Update to firmware version 3.3.03.022.

Provided and/or discovered by
Jean-Sébastien Guay-Leroux

Original Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/044874.html
http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/044875.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area