Multiple vendors' email content/virus scanners do not adequately check "message/partial" MIME entities

Overview Email anti-virus scanners and content filters from multiple vendors do not adequately check messages containing "message/partial" MIME entities RFC 2046. As a result, viruses, malicious code, or other restricted content may not be detected. Description Section 5.2.2 of RFC 2046 defines t...

CVE-2002-0485

Norton Anti-Virus NAV allows remote attackers to bypass content filtering via attachments whose Content-Type and Content-Disposition headers are mixed upper and lower case, which is ignored by some mail clients...

CVE-2002-0637

InterScan VirusWall 3.52 build 1462 allows remote attackers to bypass virus protection via e-mail messages with headers that violate RFC specifications by having or missing space characters in unexpected places aka "space gap", such as 1 Content-Type :", 2 "Content-Transfer-Encoding :", 3 no spac...

CVE-2002-0637

InterScan VirusWall 3.52 build 1462 is affected by CVE-2002-0637. The vulnerability arises from email headers that violate RFC syntax via space gap patterns (examples include Content-Type :", Content-Transfer-Encoding :, missing space before a boundary, and boundary= ), which an attacker can expl...

CVE-2002-0637

InterScan VirusWall 3.52 build 1462 allows remote attackers to bypass virus protection via e-mail messages with headers that violate RFC specifications by having or missing space characters in unexpected places aka "space gap", such as 1 Content-Type :", 2 "Content-Transfer-Encoding :", 3 no spac...

CVE-2002-0485

Norton Anti-Virus NAV allows remote attackers to bypass content filtering via attachments whose Content-Type and Content-Disposition headers are mixed upper and lower case, which is ignored by some mail clients...

CVE-2002-0485

Affected software: Norton Anti-Virus (NAV). Vulnerability: attachments whose Content-Type and Content-Disposition headers are mixed upper/lower case can bypass content filtering, an issue observed by some mail clients. Root cause: header case sensitivity leads to filtering bypass. Impact: allows ...

CVE-2002-0485

Norton Anti-Virus NAV allows remote attackers to bypass content filtering via attachments whose Content-Type and Content-Disposition headers are mixed upper and lower case, which is ignored by some mail clients...

Уязвимость утилиты для UPS

Hello 3APA3A! APC American Power Conversion Corp. http://www.apc.com PowerChute plus 5.0.2 for Windows 95/98 Утилита мониторинга источников бесперебойного питания. После установки, без ведома пользователя открывает полный сетевой доступ под именем PWRCHUTE к своему каталогу Program FilesPwrchute...

MIME::Tools Perl module and virus scanners

Background ---------- MIME::Tools is a very nice Perl module for parsing and constructing MIME-encoded mail messages. The latest stable version is 5.411a. MIME::Tools works very well on valid MIME messages. However, there are a number of problems if you use it to implement server-based mail...

CVE-2002-0285

Outlook Express 5.5 and 6.0 on Windows treats a carriage return "CR" in a message header as if it were a valid carriage return/line feed combination CR/LF, which could allow remote attackers to bypass virus protection and or other filtering mechanisms via a mail message with headers that only...

CVE-2002-0285

Outlook Express 5.5 and 6.0 on Windows is affected. A CR in a message header is treated as a valid CR/LF, allowing header splitting that can bypass virus protection and other filters by sending a mail message whose headers contain only the CR, which causes Outlook to create separate headers. Root...

CVE-2002-0285

Outlook Express 5.5 and 6.0 on Windows treats a carriage return "CR" in a message header as if it were a valid carriage return/line feed combination CR/LF, which could allow remote attackers to bypass virus protection and or other filtering mechanisms via a mail message with headers that only...

VirusWall HTTP proxy content scanning circumvention

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 FOR PUBLIC RELEASE - ------------------------------------------------------------------------ Inside Security GmbH Vulnerability Notification Revision 0.3 2002-03-10 - ------------------------------------------------------------------------ The latest...

Trend Micro Interscan VirusWall 3.53.6 - Content-Length Scan Bypass

Trend Micro Interscan VirusWall 3.53.6 - Content-Length Scan Bypass // source: https://www.securityfocus.com/bid/4265/info Trend Micro InterScan VirusWall is a high performance internet gateway virus scanning package. It is capable of scanning incoming content over HTTP, SMTP and FTP for viruses...

CVE-1999-1512

The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to execute arbitrary commands as root via an infected mail message with shell metacharacters in the reply-to field...

CVE-1999-1512

The CVE-1999-1512 entry concerns the AMaViS virus scanner, specifically versions 0.2.0-pre4 and earlier. The documented vulnerability allows remote attackers to execute arbitrary commands as root by sending an infected mail message containing shell metacharacters in the reply-to field. The availa...

Re: Edvice Security Services <[email protected], 000701c1c5fb$c168f970$5a01010a@mic2000

On 7 March, Edivice Security submitted the following: To: BugTraq Subject: Various Vulnerabilities in Norton Anti-Virus 2002 Date: Mar 7 2002 6:16PM Author: Edvice Security Services [email protected] Message-ID: 000701c1c5fb$c168f970$5a01010a@mic2000 Various Vulnerabilities in Norton...

Various Vulnerabilities in Norton Anti-Virus 2002

Various Vulnerabilities in Norton Anti-Virus 2002 ++++++++++++++++++++++++++++++++++++ Scope ---------- Edvice recently tested NAV 2002's ability to detect viruses in incoming e-mail messages. NAV 2002 includes an Email protection feature that scans incoming and outgoing e-mails for viruses. The...

[SPSadvisory#46]Apple QuickTime Player "Content-Type" Buffer Overflow

SPS Advisory 46 Apple QuickTime Player "Content-Type" Buffer Overflow UNYUN [email protected] Shadow Penguin Security http://www.shadowpenguin.org ---------------------------------------------------------------------- Date =================== Feb. 9, 2002 Vulnerable ===================...