Lucene search

[email protected]CVE-2004-0051

HistoryOct 20, 2004 - 4:00 a.m.

CVE-2004-0051

2004-10-2004:00:00

[email protected]

web.nvd.nist.gov

content security

gateway

antivirus

remote code bypass

mime

encoding

vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.7%

JSON

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard but frequently supported Content-Transfer-Encoding values such as (1) uuencode, (2) mac-binhex40, and (3) yenc, which may be interpreted differently by mail clients.

Affected configurations

NVD

Node

clearswiftmailsweeperMatch4.3.7

clearswiftmailsweeperMatch4.3.8

clearswiftmailsweeperMatch4.3.10

clearswiftmailsweeperMatch4.3.11

clearswiftmailsweeperMatch4.3.13

clearswiftmailsweeperMatch4.3.14

clearswiftmailsweeperMatch4.3.15

f-secureinternet_gatekeeperMatch6.3

f-secureinternet_gatekeeperMatch6.4

f-secureinternet_gatekeeperMatch6.31

f-secureinternet_gatekeeperMatch6.32

paul_l_danielsripmimeMatch1.2.0

paul_l_danielsripmimeMatch1.2.1

paul_l_danielsripmimeMatch1.2.2

paul_l_danielsripmimeMatch1.2.3

paul_l_danielsripmimeMatch1.2.4

paul_l_danielsripmimeMatch1.2.5

paul_l_danielsripmimeMatch1.2.6

paul_l_danielsripmimeMatch1.2.7

paul_l_danielsripmimeMatch1.3.2.0

paul_l_danielsripmimeMatch1.3.2.2

paul_l_danielsripmimeMatch1.3.2.3

CPENameOperatorVersion
clearswift:mailsweeperclearswift mailsweepereq4.3.7
clearswift:mailsweeperclearswift mailsweepereq4.3.8
clearswift:mailsweeperclearswift mailsweepereq4.3.10
clearswift:mailsweeperclearswift mailsweepereq4.3.11
clearswift:mailsweeperclearswift mailsweepereq4.3.13
clearswift:mailsweeperclearswift mailsweepereq4.3.14
clearswift:mailsweeperclearswift mailsweepereq4.3.15
f-secure:internet_gatekeeperf-secure internet gatekeepereq6.3
f-secure:internet_gatekeeperf-secure internet gatekeepereq6.4
f-secure:internet_gatekeeperf-secure internet gatekeepereq6.31

CPE	Name	Operator	Version
clearswift:mailsweeper	clearswift mailsweeper	eq	4.3.7
clearswift:mailsweeper	clearswift mailsweeper	eq	4.3.8
clearswift:mailsweeper	clearswift mailsweeper	eq	4.3.10
clearswift:mailsweeper	clearswift mailsweeper	eq	4.3.11
clearswift:mailsweeper	clearswift mailsweeper	eq	4.3.13
clearswift:mailsweeper	clearswift mailsweeper	eq	4.3.14
clearswift:mailsweeper	clearswift mailsweeper	eq	4.3.15
f-secure:internet_gatekeeper	f-secure internet gatekeeper	eq	6.3
f-secure:internet_gatekeeper	f-secure internet gatekeeper	eq	6.4
f-secure:internet_gatekeeper	f-secure internet gatekeeper	eq	6.31

Rows per page:

1-10 of 221

References

marc.info/?l=bugtraq&m=109517788100063&w=2

www.uniras.gov.uk/vuls/2004/380375/mime.htm

exchange.xforce.ibmcloud.com/vulnerabilities/17337

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.7%

JSON

Related for CVE-2004-0051

cvelist1 nvd1 securityvulns1