Vulnerability in Sophos Anti-Virus

CVE-2004-2088

Sophos Anti-Virus 3.78 allows remote attackers to bypass virus scanning by using a qmail generated Delivery Status Notification (DSN) where the original email is not included in the bounce message.

EPSS: 0.069 (93.4th percentile) — read the EPSS interpretation.

Affected products

Sophos Sophos_anti-virus — versions 3.4.6, 3.78
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_CONFIRM, Patch)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)