CVE-2004-2619: High severity Paul L Daniels Ripmime vulnerability
Published Dec 31, 2004
·Updated
ripMIME 1.3.2.3 and earlier allows remote attackers to bypass e-mail protection via a base64 MIME encoded attachment containing invalid characters that are not properly extracted.
Affected Software
11 affected components
Paul L Daniels Ripmime=1.2.0
Paul L Daniels Ripmime=1.2.2
Paul L Daniels Ripmime=1.3.2.2
Paul L Daniels Ripmime=1.2.3
Paul L Daniels Ripmime=1.2.6
Paul L Daniels Ripmime=1.2.5
Paul L Daniels Ripmime<=1.3.2.3
Paul L Daniels Ripmime=1.3.2.0
Paul L Daniels Ripmime=1.2.1
Paul L Daniels Ripmime=1.2.4
Paul L Daniels Ripmime=1.2.7
Remediation
Patch Available
Event History
Dec 31, 2004
CVE Published
05:00 AM
Dec 5, 2005
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2619?
CVE-2004-2619 has a medium severity rating due to its ability to allow bypass of email protection.
2
How do I fix CVE-2004-2619?
To resolve CVE-2004-2619, update ripMIME to version 1.3.2.4 or later, which includes a fix for this vulnerability.
3
What versions of ripMIME are affected by CVE-2004-2619?
CVE-2004-2619 affects ripMIME versions 1.2.0 through 1.3.2.3.
4
What type of attack is facilitated by CVE-2004-2619?
CVE-2004-2619 allows remote attackers to bypass email protection mechanisms through specially crafted base64 MIME attachments.
5
Who is the vendor associated with CVE-2004-2619?
CVE-2004-2619 is related to ripMIME, developed by Paul L. Daniels.