EUVD-2006-0637

Malware in sbrugna...

amavisd-new -- multipart boundary confusion

The Amavis project reports: Emails which consist of multiple parts Content-Type: multipart/ incorporate boundary information stating at which point one part ends and the next part begins. A boundary is announced by an Content-Type header's boundary parameter. To our current knowledge, RFC2046 and...

Microsoft Outlook Spoofing Vulnerability

A spoofing vulnerability exists when Microsoft Outlook does not strictly adhere to RFC2046, and improperly identifies the end of a MIME attachment. An improper MIME attachment ending may cause antivirus or antispam scanning to not work as intended. To exploit the vulnerability, an attacker could...

CVE-2006-0630

RITLabs The Bat! before 3.0.0.15 displays certain important headers from encapsulated data in message/partial MIME messages, instead of the real headers, which is in violation of RFC2046 header merging rules and allows remote attackers to spoof the origin of e-mail by sending a fragmented message...

Design/Logic Flaw

RITLabs The Bat! before 3.0.0.15 displays certain important headers from encapsulated data in message/partial MIME messages, instead of the real headers, which is in violation of RFC2046 header merging rules and allows remote attackers to spoof the origin of e-mail by sending a fragmented message...

CVE-2006-0630

RITLabs The Bat! before 3.0.0.15 displays certain important headers from encapsulated data in message/partial MIME messages, instead of the real headers, which is in violation of RFC2046 header merging rules and allows remote attackers to spoof the origin of e-mail by sending a fragmented message...

CVE-2006-0630

The CVE-2006-0630 issue affects RITLabs The Bat! before 3.0.0.15, where certain headers from encapsulated data in message/partial MIME messages are shown instead of the real headers, violating RFC2046 header merging. This enables remote attackers to spoof the email origin by sending a fragmented ...

CVE-2002-1121

CVE-2002-1121 describes a vulnerability where SMTP content filters fail to detect fragmented emails (RFC 2046 message/partial), allowing bypass of virus scanning. Affected products include GFI MailSecurity for Exchange/SMTP (pre-7.2), InterScan VirusWall (pre-3.52 build 1494), and the default MIM...