PT-2002-2755 · Procmail · Email Sanitizer

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-2034

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Email Sanitizer versions prior to 1.133 for Procmail

Description The issue allows remote attackers to bypass the mail filter and execute arbitrary code via crafted recursive multipart MIME attachments.

Recommendations For versions prior to 1.133, update to version 1.133 or later to resolve the issue.

Fix

Related Identifiers

CVE-2002-2034

Affected Products

Email Sanitizer

References · 4

• http://impsec.org/email-tools/sanitizer-changelog.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2002-2034 · Security Note
• http://securityfocus.com/bid/3820 · Patch
• http://iss.net/security_center/static/7847.php · Patch