CVE-2002-1121 Security feature bypass in n/a
Remote attackers can bypass virus and content filtering by sending fragmented emails, affecting SMTP security gateways.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2002-1121?
CVE-2002-1121 is a high-severity vulnerability in n/a, published on 14 Sep 2002. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of MIMEDefang before 2.21, and possibly other products, do not detect fragmented emails as defined in RFC2046 ("Message Fragmentation and Reassembly") and supported in such products as Outlook Express, which allows remote attackers to bypass content filtering, including virus checking, via fragmented emails of the message/partial content type.
Which versions are affected by CVE-2002-1121?
It affects 5 products.
Products include Gfi Mailsecurity, Network Associates Webshield Smtp, Roaring Penguin Canit, Roaring Penguin Mimedefang, Trend Micro Interscan Viruswall.
How do I fix CVE-2002-1121?
No fix has been published for CVE-2002-1121 yet. Limit exposure of the affected software until one is available.
Is CVE-2002-1121 being exploited?
There is no known exploitation of CVE-2002-1121 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-8mrp-mc3j-4vqv.