CVE-2026-116272

A flaw was found in perl-mime-tools. A remote attacker can bypass email security filters by sending a specially crafted message containing duplicate Multipurpose Internet Mail Extensions MIME boundary parameters with nested comments. Because the parser fails to properly normalize parameter names...

CVE-2026-116271

A flaw was found in perl-mime-tools. This vulnerability allows a local attacker to overwrite arbitrary files with the permissions of the application process. When the parser writes message attachments into a shared or world-writable directory, an attacker can pre-create the expected output...

CVE-2026-116268

A flaw was found in perl-MIME-tools. A remote attacker can cause a Denial of Service DoS by supplying specially crafted Multipurpose Internet Mail Extensions MIME headers containing unclosed comments. Due to inefficient parsing of parameters lacking closing parentheses, the parser repeatedly scan...

CVE-2026-116266

A flaw was found in perl-mime-tools. When parsing email headers, the library decodes partially encoded boundary values in multipart messages without flagging the content as ambiguous. A remote attacker can exploit this flaw by sending a specially crafted email message to bypass email security...

CVE-2026-116265

A flaw was found in perl-MIME-tools. A remote attacker can exploit this vulnerability to bypass email security filters by sending an email with specially crafted multipart boundary parameters. Because the parser does not properly validate boundary parameters split across continuations, it process...

CVE-2026-116264

A flaw was found in perl-MIME-tools. This vulnerability allows a remote attacker to bypass email security filters by sending an email with a malformed Content-Type parameter. Because the parser halts processing upon encountering an invalid parameter name, it discards subsequent parameters,...

CVE-2026-116273

A flaw was found in perl-mime-tools. The parser does not enforce a default limit on the number of parts processed in a MIME Multipurpose Internet Mail Extensions message. A remote attacker could exploit this vulnerability by submitting a crafted message containing an excessive number of parts,...

CVE-2026-116270

A flaw was found in perl-MIME-tools. The message header decoding routine improperly accumulates error messages when processing repeated malformed encoded word sequences. A remote attacker can exploit this vulnerability by submitting a specially crafted message header, causing excessive memory...

SLES9: Security update for perl-MIME-tools

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: perl-MIME-tools More details may also be found by searching for keyword 5011542 within the SuSE Enterprise Server 9 patch database at...

SLES9: Security update for perl-MIME-tools

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: perl-MIME-tools More details may also be found by searching for keyword 5011542 within the SuSE Enterprise Server 9 patch database linked in the references...

SuSE9 Security Update : perl-MIME-tools (YOU Patch Number 9460)

A bug when parsing empty MIME boundaries was fixed that allowed a mail virus to slip through virus scanners undetected. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Mandrake Linux Security Advisory : perl-MIME-tools (MDKSA-2004:123)

There's a bug in MIME-tools, where it mis-parses things like boundary=''. Some viruses use an empty boundary, which may allow unapproved parts through MIMEDefang. The updated packages are patched to fix this problem. As well, the Updated perl-MIME-tools requires MIME::Base64 version 3.03. Since...