CVE-2004-0051 Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard but frequently supported Content-Transfer-Encodin...
HighCVSS 7.5
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard but frequently supported Content-Transfer-Encoding values such as (1) uuencode, (2) mac-binhex40, and (3) yenc, which may be interpreted differently by mail clients.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| clearswift mailsweeper | = 4.3.7 | No fix listed |
| clearswift mailsweeper | = 4.3.8 | No fix listed |
| clearswift mailsweeper | = 4.3.10 | No fix listed |
| clearswift mailsweeper | = 4.3.11 | No fix listed |
| clearswift mailsweeper | = 4.3.13 | No fix listed |
| clearswift mailsweeper | = 4.3.14 | No fix listed |
| clearswift mailsweeper | = 4.3.15 | No fix listed |
| f-secure internet gatekeeper | = 6.3 | No fix listed |
| f-secure internet gatekeeper | = 6.4 | No fix listed |
| f-secure internet gatekeeper | = 6.31 | No fix listed |
| f-secure internet gatekeeper | = 6.32 | No fix listed |
| paul l daniels ripmime | = 1.2.0 | No fix listed |
| paul l daniels ripmime | = 1.2.1 | No fix listed |
| paul l daniels ripmime | = 1.2.2 | No fix listed |
| paul l daniels ripmime | = 1.2.3 | No fix listed |
| paul l daniels ripmime | = 1.2.4 | No fix listed |
| paul l daniels ripmime | = 1.2.5 | No fix listed |
| paul l daniels ripmime | = 1.2.6 | No fix listed |
| paul l daniels ripmime | = 1.2.7 | No fix listed |
| paul l daniels ripmime | = 1.3.2.0 | No fix listed |
| paul l daniels ripmime | = 1.3.2.2 | No fix listed |
| paul l daniels ripmime | = 1.3.2.3 | No fix listed |
References
- 20040914 Corsaire Security Advisory - Multiple vendor MIME Content-Transfer-Encoding mechanism issue mailing-list
- www.uniras.gov.uk vendor-advisory
- mime-contenttransfer-filter-bypass(17337) vdb-entry