CVE-2004-1098

Description

MIMEDefang in MIME-tools 5.414 allows remote attackers to bypass virus scanning capabilities via an e-mail attachment with a virus that contains an empty boundary string in the Content-Type header.

Affected products

• mandrakesoft / mandrake_linux9.2 – 9.2
• mandrakesoft / mandrake_linux9.2 – 9.2
• mandrakesoft / mandrake_linux10.0 – 10.0
• mandrakesoft / mandrake_linux10.0 – 10.0
• mandrakesoft / mandrake_linux10.1 – 10.1
• mandrakesoft / mandrake_linux10.1 – 10.1
• mandrakesoft / mandrake_linux_corporate_server2.1 – 2.1
• mandrakesoft / mandrake_linux_corporate_server2.1 – 2.1
• roaring_penguin / mimedefang2.43 – 2.43
• roaring_penguin / mimedefang2.44 – 2.44
• roaring_penguin / mimedefang2.45 – 2.45
• roaring_penguin / mimedefang4.46 – 4.46
• roaring_penguin / mimedefang4.47 – 4.47
• roaring_penguin / mimedefang2.4 – 2.4
• roaring_penguin / mimedefang2.14 – 2.14
• roaring_penguin / mimedefang2.20 – 2.20
• roaring_penguin / mimedefang2.21 – 2.21
• roaring_penguin / mimedefang2.38 – 2.38
• roaring_penguin / mimedefang2.39 – 2.39
• roaring_penguin / mimedefang2.41 – 2.41
• roaring_penguin / mimedefang2.42 – 2.42
• SUSE / suse_linux8.0 – 8.0
• SUSE / suse_linux8.1 – 8.1
• SUSE / suse_linux8.2 – 8.2
• SUSE / suse_linux9.0 – 9.0
• SUSE / suse_linux9.0 – 9.0
• SUSE / suse_linux9.1 – 9.1
• SUSE / suse_linux9.2 – 9.2

References

• MAILING_LISThttp://lists.roaringpenguin.com/pipermail/mimedefang/2004-October/024959.html
• VENDOR_ADVISORYhttp://www.mandriva.com/security/advisories?name=MDKSA-2004:123
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/17940
• MISChttp://www.securityfocus.com/bid/11563
• MISChttp://www.gentoo.org/security/en/glsa/glsa-200411-06.xml