Trend Micro Interscan Viruswall SMTP Header Removal Vulnerability
BID:4830
Info
Trend Micro Interscan Viruswall SMTP Header Removal Vulnerability
| Bugtraq ID: | 4830 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 24 2002 12:00AM |
| Updated: | May 24 2002 12:00AM |
| Credit: | Vulnerability discovery credited to Pedro Quintanilha <[email protected]>. |
| Vulnerable: |
Trend Micro InterScan VirusWall for Windows NT 3.52 |
| Not Vulnerable: | |
Discussion
Trend Micro Interscan Viruswall SMTP Header Removal Vulnerability
Interscan Viruswall is a mail gateway solution distributed and maintained by Trend Micro. This problem affects versions running on the Microsoft Windows platform.
Viruswall does not preserve headers from email when it is passed from Viruswall to the MTA running on the system. This problem makes it possible for outside users to obscure the origins of mail sent to the server. An attacker could take advantage of this vulnerability to spam the host without the risk of being traced. This vulnerability could also be exploited to send misinformation through the host, appearing to come from a user of the mail system.
Interscan Viruswall is a mail gateway solution distributed and maintained by Trend Micro. This problem affects versions running on the Microsoft Windows platform.
Viruswall does not preserve headers from email when it is passed from Viruswall to the MTA running on the system. This problem makes it possible for outside users to obscure the origins of mail sent to the server. An attacker could take advantage of this vulnerability to spam the host without the risk of being traced. This vulnerability could also be exploited to send misinformation through the host, appearing to come from a user of the mail system.
Exploit / POC
Trend Micro Interscan Viruswall SMTP Header Removal Vulnerability
No exploit is required for this vulnerability.
No exploit is required for this vulnerability.