PT-2001-2627 · Nai · Nai Webshield Smtp

Published 2001-12-31 · Updated 2011-03-08 · CVE-2001-1542

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NAI WebShield SMTP version 4.5 NAI WebShield SMTP version 4.5 MR1a

Description The issue allows remote attackers to bypass filtering and possibly execute arbitrary code in email clients by not properly filtering MIME encoded email attachments.

Recommendations For version 4.5, update the filtering rules to properly handle MIME encoded email attachments. For version 4.5 MR1a, update the filtering rules to properly handle MIME encoded email attachments. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2001-1542

Affected Products

Nai Webshield Smtp

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2001-1542 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2001-11/0294.html · Note
• http://securityfocus.com/bid/3601 · Note
• http://iss.net/security_center/static/7637.php · Note