CVE-2002-0637

InterScan VirusWall 3.52 build 1462 allows remote attackers to bypass virus protection via e-mail messages with headers that violate RFC specifications by having (or missing) space characters in unexpected places (aka "space gap"), such as (1) Content-Type :", (2) "Content-Transfer-Encoding :", (3) no space before a boundary declaration, or (4) "boundary= ", which is processed by Outlook Express.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.iss.net/security_center/static/9464.php
http://www.securiteam.com/securitynews/5KP000A7QE.html	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:trend_micro:interscan_viruswall:3.52:*:*:*:*:*:*:*

History

No history.

Information

Published : 2002-07-11 04:00

Updated : 2023-12-10 10:17

NVD link : CVE-2002-0637

Mitre link : CVE-2002-0637

CVE.ORG link : CVE-2002-0637

JSON object : View

Products Affected

trend_micro

interscan_viruswall

CWE

NVD-CWE-Other

{"id": "CVE-2002-0637", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2002-07-11T04:00:00.000", "references": [{"url": "http://www.iss.net/security_center/static/9464.php", "source": "cve@mitre.org"}, {"url": "http://www.securiteam.com/securitynews/5KP000A7QE.html", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "InterScan VirusWall 3.52 build 1462 allows remote attackers to bypass virus protection via e-mail messages with headers that violate RFC specifications by having (or missing) space characters in unexpected places (aka \"space gap\"), such as (1) Content-Type :\", (2) \"Content-Transfer-Encoding :\", (3) no space before a boundary declaration, or (4) \"boundary= \", which is processed by Outlook Express."}, {"lang": "es", "value": "Interscan VirusWall build 1462 permite a atacantes remotos evadir la protecci\u00f3n mediante mensajes de correo con cabeceras que no cumplen la especificaci\u00f3nes RFC por tener (o faltarle) caract\u00e9res de espacio en lugares inesperados (tambi\u00e9n conocido como \"space gap\"); como en:\r\n\r\n\"Content-Type :\"\r\n\"Content-Transfer-Encoding :\"\r\nSin espacio antes de una declaraci\u00f3n de l\u00edmites, o\r\n \"boundary= \", que es procesado por Outlook Express."}], "lastModified": "2008-09-05T20:28:32.537", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:trend_micro:interscan_viruswall:3.52:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C7A7881A-BC30-471E-8D8F-F764F26DF8F8"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}