CVE-2002-2228: Input Validation
MailScanner before 4.0 5-1 and before 3.2 6-1 allows remote attackers to bypass protection via attachments with a filename with (1) extra leading spaces, (2) extra trailing spaces, or (3) alternate character encodings that cannot be processed by MailScanner.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-2228?
CVE-2002-2228 has a moderate severity rating as it allows remote attackers to bypass protections in MailScanner.
How do I fix CVE-2002-2228?
To fix CVE-2002-2228, upgrade MailScanner to a version later than 4.0 5-1 or 3.2 6-1.
What versions of MailScanner are affected by CVE-2002-2228?
MailScanner versions before 4.0 5-1 and versions before 3.2 6-1 are vulnerable to CVE-2002-2228.
What types of attacks are possible due to CVE-2002-2228?
CVE-2002-2228 allows attackers to bypass file attachment protections using specially crafted filenames.
Is CVE-2002-2228 an exploit or a vulnerability?
CVE-2002-2228 is classified as a vulnerability that enables potential exploits via file attachments.