Unscored severity · published Dec 31, 2001
CVE-2001-1542
NAI WebShield SMTP 4.5 and possibly 4.5 MR1a does not filter improperly MIME encoded email attachments, which could allow remote attackers to bypass filtering and possibly execute…
–
CVSS
2.8%
EPSS
No
On KEV
Description
NAI WebShield SMTP 4.5 and possibly 4.5 MR1a does not filter improperly MIME encoded email attachments, which could allow remote attackers to bypass filtering and possibly execute arbitrary code in email clients that process the invalid attachments.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WS
Webshield Smtp · Network Associates
4.5; 4.5_mr1a · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-1542
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-1542
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2001-11/0294.html
www.iss.net
http://www.iss.net/security_center/static/7637.php
www.securityfocus.com
http://www.securityfocus.com/bid/3601
More from Webshield Smtp
–
CVE-2002-1121
SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of…
–
CVE-2000-1129
McAfee WebShield SMTP 4.5 allows remote attackers to cause a denial of service via a malformed recipient field
–
CVE-2000-1130
McAfee WebShield SMTP 4.5 allows remote attackers to bypass email content filtering rules by including Extended ASCII characters in name of the attachment
–
CVE-2000-0738
WebShield SMTP 4.5 allows remote attackers to cause a denial of service by sending e-mail with a From: address that has a