CVEvulnerability

CVE-2002-0637

7.5 HIGH Published 2002-07-11 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-07-11
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

InterScan VirusWall 3.52 build 1462 allows remote attackers to bypass virus protection via e-mail messages with headers that violate RFC specifications by having (or missing) space characters in unexpected places (aka "space gap"), such as (1) Content-Type :", (2) "Content-Transfer-Encoding :", (3) no space before a boundary declaration, or (4) "boundary= ", which is processed by Outlook Express.

Affected configurations

• trend micro interscan viruswall 3.52

Related

Referenced by CWE · observed example (2)

  • CWE-156 Improper Neutralization of Whitespace weakness
  • CWE-436 Interpretation Conflict weakness

References