Ryan Smith has reported three vulnerabilities in Tumbleweed Email Firewall, which can be exploited by malicious people to compromise a vulnerable system.

1) A boundary error within the processing of LHA extended-header filenames can be exploited to cause a stack-based buffer overflow.

2) A boundary error within the processing of LHA extended-header directory names can be exploited to cause a stack-based buffer overflow.

3) A boundary error within the processing of files in LHA archives can be exploited to cause a stack-based buffer overflow via a specially crafted LHA archive containing files with overly long filenames.

Successful exploitation of the vulnerabilities allows execution of arbitrary code when an e-mail with a specially crafted attachment is processed.

Solution
According to the researcher, the vendor will not be releasing a patch. Instead, the vendor has reportedly suggested a workaround (contact the vendor for more information).

Provided and/or discovered by
Ryan Smith

Changelog
Further details available in Customer Area

Original Advisory
http://www.hustlelabs.com/advisories/04072006_tweed.pdf

Deep Links
Links available in Customer Area