John Hardin Procmail Email Sanitizer Multipart Mime Recognition Vulnerability
BID:3820
Info
John Hardin Procmail Email Sanitizer Multipart Mime Recognition Vulnerability
| Bugtraq ID: | 3820 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 05 2002 12:00AM |
| Updated: | Jan 05 2002 12:00AM |
| Credit: | Published in the Changelog for version 1.133 by John Hardin <[email protected]>. |
| Vulnerable: |
John Hardin Procmail Email Sanitizer 1.132 John Hardin Procmail Email Sanitizer 1.131 |
| Not Vulnerable: |
John Hardin Procmail Email Sanitizer 1.133 |
Discussion
John Hardin Procmail Email Sanitizer Multipart Mime Recognition Vulnerability
John Hardin's Procmail Email Sanitizer is a Procmail configuration file which attempts to locate and remove dangerous content. It is able to prevent many common email viruses from casually infecting users.
An error exists in the way some versions of the Procmail Email Sanitizer decode certain recursive multipart MIME attachments. It is possible that malicious code may be able to take advantage of this deficiency to evade the mail filter.
John Hardin's Procmail Email Sanitizer is a Procmail configuration file which attempts to locate and remove dangerous content. It is able to prevent many common email viruses from casually infecting users.
An error exists in the way some versions of the Procmail Email Sanitizer decode certain recursive multipart MIME attachments. It is possible that malicious code may be able to take advantage of this deficiency to evade the mail filter.
Exploit / POC
John Hardin Procmail Email Sanitizer Multipart Mime Recognition Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
John Hardin Procmail Email Sanitizer Multipart Mime Recognition Vulnerability
Solution:
An updated version has been made available:
John Hardin Procmail Email Sanitizer 1.131
John Hardin Procmail Email Sanitizer 1.132
Solution:
An updated version has been made available:
John Hardin Procmail Email Sanitizer 1.131
-
John Hardin html-trap.procmail.gz
http://www.impsec.org/email-tools/html-trap.procmail.gz
John Hardin Procmail Email Sanitizer 1.132
-
John Hardin html-trap.procmail.gz
http://www.impsec.org/email-tools/html-trap.procmail.gz
References
John Hardin Procmail Email Sanitizer Multipart Mime Recognition Vulnerability
References:
References:
- Enhancing E-Mail Security With Procmail (John Hardin)