Unscored severity · published Oct 20, 2004
CVE-2004-0161
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use RFC2231 encoding, which may be…
–
CVSS
2.4%
EPSS
No
On KEV
Description
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use RFC2231 encoding, which may be interpreted differently by mail clients.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IG
Internet Gatekeeper · F-secure
6.3; 6.4; 6.31; 6.32 · source: NVD
MA
Mailsweeper · Clearswift
4.3.7; 4.3.8; 4.3.10; 4.3.11; 4.3.13; 4.3.14; +1 more · source: NVD
RI
Ripmime · Paul L Daniels
1.2.0; 1.2.1; 1.2.2; 1.2.3; 1.2.4; 1.2.5; +5 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0161
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0161
marc.info
http://marc.info/?l=bugtraq&m=109524928232568&w=2
Vendor Advisory
http://www.uniras.gov.uk/vuls/2004/380375/mime.htm
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/9274
More from Mailsweeper
–
CVE-2004-2328
Clearswift MAILsweeper for SMTP before 4.3_13 allows remote attackers to cause a denial of service (infinite loop) via an e-mail with a crafted RAR archive attached
–
CVE-2003-1015
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use whitespace in an unusual fashion, which…
–
CVE-2003-1016
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use malformed quoting in MIME headers,…
–
CVE-2004-0051
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard but frequently supported…
–
CVE-2004-0052
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard separator characters, or use…
