CVE-2002-1121

Published: Sep 24, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of MIMEDefang before 2.21, and possibly other products, do not detect fragmented emails as defined in RFC2046 ("Message Fragmentation and Reassembly") and supported in such products as Outlook Express, which allows remote attackers to bypass content filtering, including virus checking, via fragmented emails of the message/partial content type.

Affected (11)

Products: Gfi: Mailsecurity · Network Associates: Webshield Smtp · Roaring Penguin: Canit, Mimedefang · +1 more

Show all products

Gfi: Mailsecurity · Network Associates: Webshield Smtp · Roaring Penguin: Canit, Mimedefang · Trend Micro: Interscan Viruswall

1 product

1 product

2 products

1 product

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Gfi Mailsecurity	Version 7.2
Network Associates Webshield Smtp	Version 4.0.5
Network Associates Webshield Smtp	Version 4.5.44
Network Associates Webshield Smtp	Version 4.5.74.0
Network Associates Webshield Smtp	Version 4.5
Roaring Penguin Canit	Version 1.2
Roaring Penguin Mimedefang	Version 2.14
Roaring Penguin Mimedefang	Version 2.20
Trend Micro Interscan Viruswall	Version 3.51
Trend Micro Interscan Viruswall	Version 3.52
Trend Micro Interscan Viruswall	Version 3.5