Unscored severity · published Oct 20, 2004
CVE-2004-0051
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard but frequently supported…
–
CVSS
2.4%
EPSS
No
On KEV
Description
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard but frequently supported Content-Transfer-Encoding values such as (1) uuencode, (2) mac-binhex40, and (3) yenc, which may be interpreted differently by mail clients.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IG
Internet Gatekeeper · F-secure
6.3; 6.4; 6.31; 6.32 · source: NVD
MA
Mailsweeper · Clearswift
4.3.7; 4.3.8; 4.3.10; 4.3.11; 4.3.13; 4.3.14; +1 more · source: NVD
RI
Ripmime · Paul L Daniels
1.2.0; 1.2.1; 1.2.2; 1.2.3; 1.2.4; 1.2.5; +5 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0051
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0051
marc.info
http://marc.info/?l=bugtraq&m=109517788100063&w=2
Vendor Advisory
http://www.uniras.gov.uk/vuls/2004/380375/mime.htm
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/17337
More from Mailsweeper
–
CVE-2004-2328
Clearswift MAILsweeper for SMTP before 4.3_13 allows remote attackers to cause a denial of service (infinite loop) via an e-mail with a crafted RAR archive attached
–
CVE-2003-1015
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use whitespace in an unusual fashion, which…
–
CVE-2003-1016
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use malformed quoting in MIME headers,…
–
CVE-2004-0052
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard separator characters, or use…
–
CVE-2004-0053
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use fields that use RFC2047 encoding, which…
