VULHUB ™

It has been confirmed that nested zip files may bypass the scanning mechanism in Surf Control E-Mail Filter for SMTP. If a zipped message attachment contains 16 other zip files, the filter will scan the first 15 files but fail to scan the 16th. Scanning is reportedly done alphabetically so it is possible to control the order in which files are scanned. This problem is said to occur due to the filter counting the number of attachments, but failing to count the depth of a compressed zip archive.

It has been confirmed that nested zip files may bypass the scanning mechanism in Surf Control E-Mail Filter for SMTP. If a zipped message attachment contains 16 other zip files, the filter will scan the first 15 files but fail to scan the 16th. Scanning is reportedly done alphabetically so it is possible to control the order in which files are scanned. This problem is said to occur due to the filter counting the number of attachments, but failing to count the depth of a compressed zip archive.