CVE-2003-1016
First published: Fri Sep 24 2004(Updated: )
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use malformed quoting in MIME headers, parameters, and values, including (1) fields that should not be quoted, (2) duplicate quotes, or (3) missing leading or trailing quote characters, which may be interpreted differently by mail clients.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| RIPMime | =1.2.0 | |
| F-Secure Internet Gatekeeper for Linux | =6.32 | |
| F-Secure Internet Gatekeeper for Linux | =6.3 | |
| RIPMime | =1.2.2 | |
| RIPMime | =1.3.2.2 | |
| Clearswift MAILsweeper | =4.3.7 | |
| RIPMime | =1.2.3 | |
| RIPMime | =1.2.6 | |
| RIPMime | =1.3.2.3 | |
| Clearswift MAILsweeper | =4.3.11 | |
| Clearswift MAILsweeper | =4.3.13 | |
| F-Secure Internet Gatekeeper for Linux | =6.4 | |
| RIPMime | =1.2.7 | |
| RIPMime | =1.3.2.0 | |
| Clearswift MAILsweeper | =4.3.10 | |
| F-Secure Internet Gatekeeper for Linux | =6.31 | |
| RIPMime | =1.2.5 | |
| Clearswift MAILsweeper | =4.3.8 | |
| RIPMime | =1.2.4 | |
| Clearswift MAILsweeper | =4.3.14 | |
| Clearswift MAILsweeper | =4.3.15 | |
| RIPMime | =1.2.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2003-1016?
CVE-2003-1016 is categorized as a high-severity vulnerability due to its ability to allow remote attackers to bypass content restrictions.
How do I fix CVE-2003-1016?
To fix CVE-2003-1016, update your affected software to the latest version that addresses the vulnerability.
Which software is affected by CVE-2003-1016?
CVE-2003-1016 affects multiple products including specific versions of RIPMime and F-Secure Internet Gatekeeper.
What types of attacks does CVE-2003-1016 enable?
CVE-2003-1016 enables attacks that bypass content filtering mechanisms via malformed MIME messages.
Is CVE-2003-1016 still a concern today?
Yes, CVE-2003-1016 remains a concern for systems using vulnerable versions of the affected software.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/references
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/paul l daniels
- canonical/ripmime
- version/ripmime/1.2.0
- vendor/f-secure
- canonical/f-secure internet gatekeeper for linux
- version/f-secure internet gatekeeper for linux/6.32
- version/f-secure internet gatekeeper for linux/6.3
- version/ripmime/1.2.2
- version/ripmime/1.3.2.2
- vendor/clearswift
- canonical/clearswift mailsweeper
- version/clearswift mailsweeper/4.3.7
- version/ripmime/1.2.3
- version/ripmime/1.2.6
- version/ripmime/1.3.2.3
- version/clearswift mailsweeper/4.3.11
- version/clearswift mailsweeper/4.3.13
- version/f-secure internet gatekeeper for linux/6.4
- version/ripmime/1.2.7
- version/ripmime/1.3.2.0
- version/clearswift mailsweeper/4.3.10
- version/f-secure internet gatekeeper for linux/6.31
- version/ripmime/1.2.5
- version/clearswift mailsweeper/4.3.8
- version/ripmime/1.2.4
- version/clearswift mailsweeper/4.3.14
- version/clearswift mailsweeper/4.3.15
- version/ripmime/1.2.1