Fragmented Email Bypass in GFI MailSecurity, InterScan VirusWall, and MIMEDefang

CVE-2002-1121

What is CVE-2002-1121?

SMTP content filter engines like GFI MailSecurity, InterScan VirusWall, and MIMEDefang are vulnerable due to improper detection of fragmented emails according to RFC2046. These vulnerabilities allow remote attackers to avoid content filtering mechanisms, including virus scanning, by exploiting message/partial content types present in fragmented emails. The default configurations of these products may not address this security gap, leading to potential exploitation of email systems.

References