CVE-2002-1121 — HIGH (7.5) — White Hats Nepal

Vulnerability Description

SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of MIMEDefang before 2.21, and possibly other products, do not detect fragmented emails as defined in RFC2046 ("Message Fragmentation and Reassembly") and supported in such products as Outlook Express, which allows remote attackers to bypass content filtering, including virus checking, via fragmented emails of the message/partial content type.

CVSS Score

7.5

HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL

Affected Products

Vendor	Product	Versions
Gfi	Mailsecurity	7.2
Network Associates	Webshield Smtp	4.0.5
Roaring Penguin	Canit	1.2
Roaring Penguin	Mimedefang	2.14
Trend Micro	Interscan Viruswall	3.5

References

FAQ

What is CVE-2002-1121?

CVE-2002-1121 is a vulnerability with a CVSS score of 7.5 (HIGH). SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of MIMEDefang before 2.21, and p...

How severe is CVE-2002-1121?

CVE-2002-1121 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2002-1121?

Check the references section above for vendor advisories and patch information. Affected products include: Gfi Mailsecurity, Network Associates Webshield Smtp, Roaring Penguin Canit, Roaring Penguin Mimedefang, Trend Micro Interscan Viruswall.