CNCVE编号：CNCVE-20031436 CVE编号： 安全级别：中 漏洞中文描述： SurfControl E-Mail过滤器对包含多个ZIP文件的邮件缺少正确处理，远程攻击者可以利用这个漏洞发送恶意邮件绕过系统过滤。 漏洞英文描述： It has been confirmed that nested zip files may bypass the scanning mechanism in Surf Control E-Mail Filter for SMTP. If a zipped message attachment contains 16 other zip files, the filter will scan the first 15 files but fail to scan the 16th. Scanning is reportedly done alphabetically so it is possible to control the order in which files are scanned. This problem is said to occur due to the filter counting the number of attachments, but failing to count the depth of a compressed zip archive. 漏洞参考： http://www.securityfocus.com/bid/8240 系统类型： Win2000/NT 漏洞类型：权限有效性检查错误