CVE-2004-0052 Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard separator characters, or use standard separators....
HighCVSS 7.5
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard separator characters, or use standard separators incorrectly, within MIME headers, fields, parameters, or values, which may be interpreted differently by mail clients.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| clearswift mailsweeper | = 4.3.7 | No fix listed |
| clearswift mailsweeper | = 4.3.8 | No fix listed |
| clearswift mailsweeper | = 4.3.10 | No fix listed |
| clearswift mailsweeper | = 4.3.11 | No fix listed |
| clearswift mailsweeper | = 4.3.13 | No fix listed |
| clearswift mailsweeper | = 4.3.14 | No fix listed |
| clearswift mailsweeper | = 4.3.15 | No fix listed |
| f-secure internet gatekeeper | = 6.3 | No fix listed |
| f-secure internet gatekeeper | = 6.4 | No fix listed |
| f-secure internet gatekeeper | = 6.31 | No fix listed |
| f-secure internet gatekeeper | = 6.32 | No fix listed |
| paul l daniels ripmime | = 1.2.0 | No fix listed |
| paul l daniels ripmime | = 1.2.1 | No fix listed |
| paul l daniels ripmime | = 1.2.2 | No fix listed |
| paul l daniels ripmime | = 1.2.3 | No fix listed |
| paul l daniels ripmime | = 1.2.4 | No fix listed |
| paul l daniels ripmime | = 1.2.5 | No fix listed |
| paul l daniels ripmime | = 1.2.6 | No fix listed |
| paul l daniels ripmime | = 1.2.7 | No fix listed |
| paul l daniels ripmime | = 1.3.2.0 | No fix listed |
| paul l daniels ripmime | = 1.3.2.2 | No fix listed |
| paul l daniels ripmime | = 1.3.2.3 | No fix listed |
References
- 20040914 Corsaire Security Advisory - Multiple vendor MIME separator issue mailing-list
- www.uniras.gov.uk vendor-advisory
- mime-separator-filtering-bypass(17334) vdb-entry