CVE-2004-0053 Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use fields that use RFC2047 encoding, which may be interpreted dif...
HighCVSS 7.5
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use fields that use RFC2047 encoding, which may be interpreted differently by mail clients.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| clearswift mailsweeper | = 4.3.7 | No fix listed |
| clearswift mailsweeper | = 4.3.8 | No fix listed |
| clearswift mailsweeper | = 4.3.10 | No fix listed |
| clearswift mailsweeper | = 4.3.11 | No fix listed |
| clearswift mailsweeper | = 4.3.13 | No fix listed |
| clearswift mailsweeper | = 4.3.14 | No fix listed |
| clearswift mailsweeper | = 4.3.15 | No fix listed |
| f-secure internet gatekeeper | = 6.3 | No fix listed |
| f-secure internet gatekeeper | = 6.4 | No fix listed |
| f-secure internet gatekeeper | = 6.31 | No fix listed |
| f-secure internet gatekeeper | = 6.32 | No fix listed |
| paul l daniels ripmime | = 1.2.0 | No fix listed |
| paul l daniels ripmime | = 1.2.1 | No fix listed |
| paul l daniels ripmime | = 1.2.2 | No fix listed |
| paul l daniels ripmime | = 1.2.3 | No fix listed |
| paul l daniels ripmime | = 1.2.4 | No fix listed |
| paul l daniels ripmime | = 1.2.5 | No fix listed |
| paul l daniels ripmime | = 1.2.6 | No fix listed |
| paul l daniels ripmime | = 1.2.7 | No fix listed |
| paul l daniels ripmime | = 1.3.2.0 | No fix listed |
| paul l daniels ripmime | = 1.3.2.2 | No fix listed |
| paul l daniels ripmime | = 1.3.2.3 | No fix listed |
References
- 20040914 Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue mailing-list
- www.uniras.gov.uk vendor-advisory
- mime-rfc2047-filtering-bypass(17331) vdb-entry