CVEvulnerability
CVE-2004-1098
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-01-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
MIMEDefang in MIME-tools 5.414 allows remote attackers to bypass virus scanning capabilities via an e-mail attachment with a virus that contains an empty boundary string in the Content-Type header.
Affected configurations
• roaring penguin mimedefang 2.4
• roaring penguin mimedefang 2.14
• roaring penguin mimedefang 2.20
• roaring penguin mimedefang 2.21
• roaring penguin mimedefang 2.38
• roaring penguin mimedefang 2.39
• roaring penguin mimedefang 2.41
• roaring penguin mimedefang 2.42
• roaring penguin mimedefang 2.43
• roaring penguin mimedefang 2.44
• roaring penguin mimedefang 2.45
• roaring penguin mimedefang 4.46
• roaring penguin mimedefang 4.47
• mandrakesoft mandrake linux 9.2
• mandrakesoft mandrake linux 10.0
• mandrakesoft mandrake linux 10.1
• mandrakesoft mandrake linux corporate server 2.1
• suse suse linux 8.0
• suse suse linux 8.1
• suse suse linux 8.2
• suse suse linux 9.0
• suse suse linux 9.1
• suse suse linux 9.2
References
- http://lists.roaringpenguin.com/pipermail/mimedefang/2004-October/024959.html lists.roaringpenguin.com
- http://www.gentoo.org/security/en/glsa/glsa-200411-06.xml Patch, Vendor Advisory
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:123 www.mandriva.com
- http://www.securityfocus.com/bid/11563 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17940 exchange.xforce.ibmcloud.com
- http://lists.roaringpenguin.com/pipermail/mimedefang/2004-October/024959.html lists.roaringpenguin.com
- http://www.gentoo.org/security/en/glsa/glsa-200411-06.xml Patch, Vendor Advisory
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:123 www.mandriva.com
- http://www.securityfocus.com/bid/11563 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17940 exchange.xforce.ibmcloud.com