Login Request a demo
Unscored severity · published Oct 20, 2004
CVE-2003-1016
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use malformed quoting in MIME headers,…
–
CVSS
2.4%
EPSS
No
On KEV
Description
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use malformed quoting in MIME headers, parameters, and values, including (1) fields that should not be quoted, (2) duplicate quotes, or (3) missing leading or trailing quote characters, which may be interpreted differently by mail clients.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IG
Internet Gatekeeper · F-secure
6.3; 6.4; 6.31; 6.32 · source: NVD
MA
Mailsweeper · Clearswift
4.3.7; 4.3.8; 4.3.10; 4.3.11; 4.3.13; 4.3.14; +1 more · source: NVD
RI
Ripmime · Paul L Daniels
1.2.0; 1.2.1; 1.2.2; 1.2.3; 1.2.4; 1.2.5; +5 more · source: NVD
Affected product
MA
Mailsweeper
Clearswift
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-1016
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-1016
marc.info
http://marc.info/?l=bugtraq&m=109521027007616&w=2
Vendor Advisory
http://www.uniras.gov.uk/vuls/2004/380375/mime.htm
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/17336
More from Mailsweeper
–
CVE-2004-2328
Clearswift MAILsweeper for SMTP before 4.3_13 allows remote attackers to cause a denial of service (infinite loop) via an e-mail with a crafted RAR archive attached
–
CVE-2003-1015
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use whitespace in an unusual fashion, which…
–
CVE-2004-0051
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard but frequently supported…
–
CVE-2004-0052
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard separator characters, or use…
–
CVE-2004-0053
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use fields that use RFC2047 encoding, which…