ripMIME MIME附件解码漏洞

漏洞信息详情

ripMIME MIME附件解码漏洞

CNNVD编号：CNNVD-200412-852
危害等级：高危-->
危害等级：高危
CVE编号： CVE-2004-2619
漏洞类型：输入验证
发布时间： 2004-12-31
威胁类型：远程
更新时间： 2006-08-22
厂商： paul_l_daniels
漏洞来源： paul_l_daniels

漏洞简介

ripMIME 1.3.2.3及其早期版本存在漏洞。远程攻击者可以借助包含不正确提取的无效字符的基于64位的MIME解码附件绕过邮件保护。

漏洞公告

The vendor has released version 1.3.2.3 addressing this issue. plDaniels ripMime 1.2 .0

plDaniels ripmime-1.3.2.3.tar.gz http://www.pldaniels.com/ripmime/ripmime-1.3.2.3.tar.gz

plDaniels ripMime 1.2.1

plDaniels ripmime-1.3.2.3.tar.gz http://www.pldaniels.com/ripmime/ripmime-1.3.2.3.tar.gz

plDaniels ripMime 1.2.2

plDaniels ripmime-1.3.2.3.tar.gz http://www.pldaniels.com/ripmime/ripmime-1.3.2.3.tar.gz

plDaniels ripMime 1.2.3

plDaniels ripmime-1.3.2.3.tar.gz http://www.pldaniels.com/ripmime/ripmime-1.3.2.3.tar.gz

plDaniels ripMime 1.2.4

plDaniels ripmime-1.3.2.3.tar.gz http://www.pldaniels.com/ripmime/ripmime-1.3.2.3.tar.gz

plDaniels ripMime 1.2.5

plDaniels ripmime-1.3.2.3.tar.gz http://www.pldaniels.com/ripmime/ripmime-1.3.2.3.tar.gz

plDaniels ripMime 1.2.6

plDaniels ripmime-1.3.2.3.tar.gz http://www.pldaniels.com/ripmime/ripmime-1.3.2.3.tar.gz

plDaniels ripMime 1.2.7

plDaniels ripmime-1.3.2.3.tar.gz http://www.pldaniels.com/ripmime/ripmime-1.3.2.3.tar.gz

plDaniels ripMime 1.3.2 .0

plDaniels ripmime-1.3.2.3.tar.gz http://www.pldaniels.com/ripmime/ripmime-1.3.2.3.tar.gz

plDaniels ripMime 1.3.2 .2

plDaniels ripmime-1.3.2.3.tar.gz http://www.pldaniels.com/ripmime/ripmime-1.3.2.3.tar.gz

参考网址

来源: BID 名称: 10848 链接:http://www.securityfocus.com/bid/10848 来源: XF 名称: ripmime-attachment-filters-bypass(16867) 链接:http://xforce.iss.net/xforce/xfdb/16867 来源: www.pldaniels.com 链接:http://www.pldaniels.com/ripmime/CHANGELOG 来源: OSVDB 名称: 8287 链接:http://www.osvdb.org/8287 来源: SECUNIA 名称: 12201 链接:http://secunia.com/advisories/12201

受影响实体

Paul_l_daniels Ripmime:1.3.2.3
Paul_l_daniels Ripmime:1.3.2.2
Paul_l_daniels Ripmime:1.3.2.0
Paul_l_daniels Ripmime:1.2.7
Paul_l_daniels Ripmime:1.2.6

补丁

暂无

正文

ripMIME MIME附件解码漏洞

漏洞信息详情