Lucene search

[email protected]CVE-2001-1542

HistoryOct 03, 2022 - 4:22 p.m.

CVE-2001-1542

2022-10-0316:22:34

[email protected]

web.nvd.nist.gov

nai webshield

smtp

filter

mime

email attachments

security flaw

bypass filtering

cve-2001-1542

nvd.

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8 High

AI Score

Confidence

Low

0.02 Low

EPSS

Percentile

89.0%

JSON

NAI WebShield SMTP 4.5 and possibly 4.5 MR1a does not filter improperly MIME encoded email attachments, which could allow remote attackers to bypass filtering and possibly execute arbitrary code in email clients that process the invalid attachments.

Affected configurations

NVD

Node

network_associateswebshield_smtpMatch4.5

network_associateswebshield_smtpMatch4.5_mr1a

CPENameOperatorVersion
network_associates:webshield_smtpnetwork associates webshield smtpeq4.5
network_associates:webshield_smtpnetwork associates webshield smtpeq4.5_mr1a

CPE	Name	Operator	Version
network_associates:webshield_smtp	network associates webshield smtp	eq	4.5
network_associates:webshield_smtp	network associates webshield smtp	eq	4.5_mr1a

References

archives.neohapsis.com/archives/bugtraq/2001-11/0294.html

www.iss.net/security_center/static/7637.php

www.securityfocus.com/bid/3601

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8 High

AI Score

Confidence

Low

0.02 Low

EPSS

Percentile

89.0%

JSON

Related for CVE-2001-1542

nvd1 cvelist1