CVE-2002-2034 The Email Sanitizer before 1.133 for Procmail allows remote attackers to bypass the mail filter and execute arbitrary code via crafted recursive multipart MIME attachments.
HighCVSS 7.5
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Email Sanitizer before 1.133 for Procmail allows remote attackers to bypass the mail filter and execute arbitrary code via crafted recursive multipart MIME attachments.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| john hardin procmail email sanitizer | = 1.131 | No fix listed |
| john hardin procmail email sanitizer | = 1.132 | No fix listed |
References
- www.impsec.org patch
- pes-mime-bypass-filter(7847) patch vdb-entry
- 3820 patch vdb-entry