CVE-2002-0637 Security feature bypass in n/a
Remote attackers can bypass virus scanning in InterScan VirusWall by sending emails with malformed headers that exploit parsing inconsistencies.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2002-0637?
CVE-2002-0637 is a high-severity vulnerability in n/a, published on 4 Jul 2002. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
InterScan VirusWall 3.52 build 1462 allows remote attackers to bypass virus protection via e-mail messages with headers that violate RFC specifications by having (or missing) space characters in unexpected places (aka "space gap"), such as (1) Content-Type :", (2) "Content-Transfer-Encoding :", (3) no space before a boundary declaration, or (4) "boundary= ", which is processed by Outlook Express.
Which versions are affected by CVE-2002-0637?
It affects 1 product.
Products include Trend Micro Interscan Viruswall.
How do I fix CVE-2002-0637?
No fix has been published for CVE-2002-0637 yet. Limit exposure of the affected software until one is available.
Is CVE-2002-0637 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2002-0637 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as GHSA-fc5f-6557-pm73.