Vulnerability in Gfi Mailsecurity
CVE-2002-1121
SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of MIMEDefang before 2.21, and possibly other products, do not detect fragmented emails as defined in RFC2046 ("Message Fragmentation and Reassembly") and supported in such products as Outlook Express, which allows remote attackers to bypass content filtering, including virus checking, via fragmented emails of the message/partial content type.
EPSS: 0.067 (93.5th percentile) — read the EPSS interpretation.
Affected products
- Gfi Mailsecurity — versions 7.2
- Network_associates Webshield_smtp — versions 4.0.5, 4.5, 4.5.44
- Roaring_penguin Canit — versions 1.2
- Roaring_penguin Mimedefang — versions 2.14, 2.20
- Trend_micro Interscan_viruswall — versions 3.5, 3.51, 3.52
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_VULNWATCH)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, Vendor Advisory, x_refsource_XF)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
Frequently asked questions
- What is CVE-2002-1121?
- CVE-2002-1121 is a vulnerability in Gfi Mailsecurity. Published 2002-09-24.
- Is CVE-2002-1121 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.