Vulnerability Details CVE-2004-1098
MIMEDefang in MIME-tools 5.414 allows remote attackers to bypass virus scanning capabilities via an e-mail attachment with a virus that contains an empty boundary string in the Content-Type header.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 62.4%
CVSS Severity
CVSS v2 Score 7.5
References
- http://lists.roaringpenguin.com/pipermail/mimedefang/2004-October/024959.html
- http://www.gentoo.org/security/en/glsa/glsa-200411-06.xml
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:123
- http://www.securityfocus.com/bid/11563
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17940
- http://lists.roaringpenguin.com/pipermail/mimedefang/2004-October/024959.html
- http://www.gentoo.org/security/en/glsa/glsa-200411-06.xml
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:123
- http://www.securityfocus.com/bid/11563
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17940
Products affected by CVE-2004-1098
-
cpe:2.3:a:roaring_penguin:mimedefang:2.14
-
cpe:2.3:a:roaring_penguin:mimedefang:2.20
-
cpe:2.3:a:roaring_penguin:mimedefang:2.21
-
cpe:2.3:a:roaring_penguin:mimedefang:2.38
-
cpe:2.3:a:roaring_penguin:mimedefang:2.39
-
cpe:2.3:a:roaring_penguin:mimedefang:2.4
-
cpe:2.3:a:roaring_penguin:mimedefang:2.41
-
cpe:2.3:a:roaring_penguin:mimedefang:2.42
-
cpe:2.3:a:roaring_penguin:mimedefang:2.43
-
cpe:2.3:a:roaring_penguin:mimedefang:2.44
-
cpe:2.3:a:roaring_penguin:mimedefang:2.45
-
cpe:2.3:a:roaring_penguin:mimedefang:4.46
-
cpe:2.3:a:roaring_penguin:mimedefang:4.47
-
cpe:2.3:o:mandrakesoft:mandrake_linux:10.0
-
cpe:2.3:o:mandrakesoft:mandrake_linux:10.1
-
cpe:2.3:o:mandrakesoft:mandrake_linux:9.2
-
cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1
-
cpe:2.3:o:suse:suse_linux:8.0
-
cpe:2.3:o:suse:suse_linux:8.1
-
cpe:2.3:o:suse:suse_linux:8.2
-
cpe:2.3:o:suse:suse_linux:9.0
-
cpe:2.3:o:suse:suse_linux:9.1
-
cpe:2.3:o:suse:suse_linux:9.2