PT-2001-2627 · Nai · Nai Webshield Smtp

Publicado 2001-12-31 · Atualizado 2011-03-08 · CVE-2001-1542

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NAI WebShield SMTP version 4.5 NAI WebShield SMTP version 4.5 MR1a

Description The issue allows remote attackers to bypass filtering and possibly execute arbitrary code in email clients by not properly filtering MIME encoded email attachments.

Recommendations For version 4.5, update the filtering rules to properly handle MIME encoded email attachments. For version 4.5 MR1a, update the filtering rules to properly handle MIME encoded email attachments. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2001-1542

Produtos afetados

Nai Webshield Smtp

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2001-1542 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2001-11/0294.html · Nota
• http://securityfocus.com/bid/3601 · Nota
• http://iss.net/security_center/static/7637.php · Nota