NVD

Id
80116  
Name
CVE-2002-1121  
Description
SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of MIMEDefang before 2.21, and possibly other products, do not detect fragmented emails as defined in RFC2046 ("Message Fragmentation and Reassembly") and supported in such products as Outlook Express, which allows remote attackers to bypass content filtering, including virus checking, via fragmented emails of the message/partial content type.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2002-09-24  
Modified Date
2016-10-17  
Seq
2002-1121  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
399343 80116 CVE-2002-1121 20020912 FW: Bypassing SMTP Content Protection with a Flick of a Button  View
399344 80116 CVE-2002-1121 20020912 Roaring Penguin fixes for "Bypassing SMTP Content Protection with a Flick of a Button"  View
399345 80116 CVE-2002-1121 20020912 Bypassing SMTP Content Protection with a Flick of a Button  View
399346 80116 CVE-2002-1121 20020912 Bypassing SMTP Content Protection with a Flick of a Button  View
399347 80116 CVE-2002-1121 20020912 MIMEDefang update (was Re: Bypassing SMTP Content Protection )  View
399348 80116 CVE-2002-1121 smtp-content-filtering-bypass(10088)  View
399349 80116 CVE-2002-1121 VU#836088  View
399350 80116 CVE-2002-1121 http://www.securiteam.com/securitynews/5YP0A0K8CM.html  View
399351 80116 CVE-2002-1121 5696  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63893 JVNDB-2002-000220 TrendMicro InterScan VirusWall におけるウイルス検査回避の脆弱性 TrendMicro InterScan VirusWall において、分割して送信したメールにウイルスが含まれている場合に、 VirusWall はウイルスを検出できない脆弱性が存在します。 CVE-2002-1121 5508 CVE-2002-1121 80116 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000220.html 2002-09-12 2007-04-01 View