CVE-2004-1098: High severity Roaring Penguin MIMEDefang vulnerability
Published Dec 1, 2004
·Updated
MIMEDefang in MIME-tools 5.414 allows remote attackers to bypass virus scanning capabilities via an e-mail attachment with a virus that contains an empty boundary string in the Content-Type header.
Affected Software
28 affected components
Roaring Penguin MIMEDefang=2.4
Roaring Penguin MIMEDefang=2.14
Roaring Penguin MIMEDefang=2.20
Roaring Penguin MIMEDefang=2.21
Roaring Penguin MIMEDefang=2.38
Roaring Penguin MIMEDefang=2.39
Roaring Penguin MIMEDefang=2.41
Roaring Penguin MIMEDefang=2.42
Roaring Penguin MIMEDefang=2.43
Roaring Penguin MIMEDefang=2.44
Roaring Penguin MIMEDefang=2.45
Roaring Penguin MIMEDefang=4.46
Roaring Penguin MIMEDefang=4.47
Mandrakesoft Mandrake Linux=9.2
Mandrakesoft Mandrake Linux=9.2
Mandrakesoft Mandrake Linux=10.0
Mandrakesoft Mandrake Linux=10.0
Mandrakesoft Mandrake Linux=10.1
Mandrakesoft Mandrake Linux=10.1
Mandrakesoft Mandrake Linux Corporate Server=2.1
Mandrakesoft Mandrake Linux Corporate Server=2.1
SUSE SuSE Linux=8.0
SUSE SuSE Linux=8.1
SUSE SuSE Linux=8.2
SUSE SuSE Linux=9.0
SUSE SuSE Linux=9.0
SUSE SuSE Linux=9.1
SUSE SuSE Linux=9.2
Remediation
Patch Available
Patch Available
Event History
Dec 1, 2004
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1098?
CVE-2004-1098 has been classified as a high severity vulnerability due to its ability to bypass virus scanning mechanisms.
2
How do I fix CVE-2004-1098?
To fix CVE-2004-1098, you should upgrade to a patched version of MIMEDefang that addresses this vulnerability.
3
Which versions of MIMEDefang are affected by CVE-2004-1098?
CVE-2004-1098 affects MIMEDefang versions 2.14, 2.20, 2.21, 2.38, 2.39, 2.41, 2.42, 2.43, 2.44, 2.45, 4.46, and 4.47.
4
Can CVE-2004-1098 be exploited remotely?
Yes, CVE-2004-1098 can be exploited remotely via specially crafted email attachments.
5
What impact does CVE-2004-1098 have on email security?
CVE-2004-1098 undermines email security by allowing viruses to bypass virus scanning checks in MIMEDefang.