CVE-2004-0051

CVE-2004-0051 affects multiple content security gateway and antivirus products. The issue arises from MIME Content-Transfer-Encoding values that are non-standard but widely supported (uuencode, mac-binhex40, yenc), which may be interpreted differently by mail clients and allow remote attackers to...

CVE-2004-0161

The CVE-2004-0161 issue affects multiple content security gateway and antivirus products. The vulnerability allows remote attackers to bypass content restrictions by sending MIME messages encoded with RFC2231, which can be interpreted differently by mail clients. The NVD entry shows a base CVSS v...

CVE-2004-0162

The CVE-2004-0162 entry describes a vulnerability in multiple content security gateway and antivirus products where MIME encapsulation using RFC822 comment fields can be misinterpreted by mail clients, allowing bypass of content restrictions. The affected software is referred to generically (mult...

CVE-2004-0161

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use RFC2231 encoding, which may be interpreted differently by mail clients...

CVE-2003-1016

The CVE-2003-1016 entry describes a vulnerability in multiple content security gateway and antivirus products where remote attackers can bypass content restrictions by sending MIME messages with malformed quoting in headers/parameters/values. The issue arises from fields that should not be quoted...

[Full-Disclosure] Corsaire Security Advisory - Multiple vendor MIME separator issue

-- Corsaire Security Advisory -- Title: Multiple vendor MIME separator issue Date: 04.08.03 Application: various Environment: various Author: Martin O'Neal [email protected] Audience: General distribution Reference: c030804-006 -- Scope -- The aim of this document is to clearly define a...

[Full-Disclosure] Corsaire Security Advisory - Multiple vendor MIME RFC2231 encoding issue

-- Corsaire Security Advisory -- Title: Multiple vendor MIME RFC2047 encoding issue Date: 04.08.03 Application: various Environment: various Author: Martin O'Neal [email protected] Audience: General distribution Reference: c030804-007 -- Scope -- The aim of this document is to clearly...

[Full-Disclosure] Corsaire Security Advisory - Multiple vendor MIME field multiple occurrence issue

-- Corsaire Security Advisory -- Title: Multiple vendor MIME field multiple occurrence issue Date: 04.08.03 Application: various Environment: various Author: Martin O'Neal [email protected] Audience: General distribution Reference: c030804-002 -- Scope -- The aim of this document is to...

Corsaire Security Advisory - Clearswift MAILsweeper MIME attachme nt evasion issue

-- Corsaire Security Advisory -- Title: Clearswift MAILsweeper MIME attachment evasion issue Date: 03.03.03 Application: Clearswift MAILsweeper 4.x Environment: Windows NT 4.0, Windows 2000, Author: Martin O'Neal [email protected] Audience: General distribution -- Scope -- The aim of this...

Various problems in Baltimore WebSweeper URL filtering

Tuesday 4 September 2001 Various problems in Baltimore WebSweeper URL filtering ====================================================== Product Background ------------------ WEBSweeper is Baltimore Technologies' Web Content Security solution. It enables customers to implement Content Security...

Various problems in Baltimore's WEBSweeper Script filtering

Sunday 12 August 2001 eDvice Security Services Advisory Various problems in Baltimore's WEBSweeper Script filtering =========================================================== Product Background ------------------- WEBsweeper is Baltimore Technologies' Web Content Security solution. It enables...

Aladdin eSafe Gateway Script-filtering Bypass through Unicode Vulnerability

29 May 2001 This is the third of 3 sequential advisories we are issuing regarding Aladdin eSafe Gateway. Status -------- The entire content of this advisory was reviewed and acknowledged by Aladdin. Product Background -------------------------- eSafe Gateway is an Internet Content Security produc...

Aladdin eSafe Gateway Script-filtering Bypass through HTML tags

29 May 2001 This is the second of 3 sequential advisories we are issuing regarding Aladdin eSafe Gateway. Product Background --------------------------- eSafe Gateway is an Internet Content Security product. You can configure eSafe Gateway to remove scripts VBScripts, JavaScripts and other...

Aladdin eSafe Gateway Filter Bypass - Updated Advisory

29 May 2001 This is the first of 3 sequential advisories we are issuing today regarding Aladdin eSafe Gateway. This advisory replaces our advisory from 16 May 2001. Status --------- The entire content of this advisory was reviewed and acknowledged by Aladdin. The vulnerability reffers to version...

Aladdin eSafe Gateway script filter bypass

Product: eSafe Gateway Vendor: Aladdin Knowledge Systems www.ealaddin.com Vesrsion: 3.0 was tested and found vulnerable, earlier versions might be vulnerable as well. Status: Vendor was informed. Background -------------------- eSafe Gateway 3.0 is an Internet Content Security product. You can...