Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2002-1121

SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of MIMEDefang before 2.21, and possibly other products, do not detect fragmented emails as defined in RFC2046 ("Message Fragmentation and Reassembly") and supported in such products as Outlook Express, which allows remote attackers to bypass content filtering, including virus checking, via fragmented emails of the message/partial content type.

Published

2002-09-24T04:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application gfi mailsecurity 7.2 Yes
Application network_associates webshield_smtp 4.0.5 Yes
Application network_associates webshield_smtp 4.5 Yes
Application network_associates webshield_smtp 4.5.44 Yes
Application network_associates webshield_smtp 4.5.74.0 Yes
Application roaring_penguin canit 1.2 Yes
Application roaring_penguin mimedefang 2.14 Yes
Application roaring_penguin mimedefang 2.20 Yes
Application trend_micro interscan_viruswall 3.5 Yes
Application trend_micro interscan_viruswall 3.51 Yes
Application trend_micro interscan_viruswall 3.52 Yes
References