Unscored severity · published Oct 20, 2004
CVE-2004-0052
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard separator characters, or use…
–
CVSS
2.4%
EPSS
No
On KEV
Description
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard separator characters, or use standard separators incorrectly, within MIME headers, fields, parameters, or values, which may be interpreted differently by mail clients.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IG
Internet Gatekeeper · F-secure
6.3; 6.4; 6.31; 6.32 · source: NVD
MA
Mailsweeper · Clearswift
4.3.7; 4.3.8; 4.3.10; 4.3.11; 4.3.13; 4.3.14; +1 more · source: NVD
RI
Ripmime · Paul L Daniels
1.2.0; 1.2.1; 1.2.2; 1.2.3; 1.2.4; 1.2.5; +5 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0052
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0052
marc.info
http://marc.info/?l=bugtraq&m=109517669115891&w=2
Vendor Advisory
http://www.uniras.gov.uk/vuls/2004/380375/mime.htm
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/17334
More from Mailsweeper
–
CVE-2004-2328
Clearswift MAILsweeper for SMTP before 4.3_13 allows remote attackers to cause a denial of service (infinite loop) via an e-mail with a crafted RAR archive attached
–
CVE-2003-1015
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use whitespace in an unusual fashion, which…
–
CVE-2003-1016
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use malformed quoting in MIME headers,…
–
CVE-2004-0051
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard but frequently supported…
–
CVE-2004-0053
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use fields that use RFC2047 encoding, which…
