MIME::Tools RFC Parameter Value Continuation Vulnerability

Bugtraq ID:	4927
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 03 2002 12:00AM
Updated:	Jun 03 2002 12:00AM
Credit:	Discovered by David F. Skoll <[email protected]>.
Vulnerable:	Eryq MIME::Tools 5.4.11 + Roaring Penguin Software MIMEDefang 2.14
Not Vulnerable:

MIME::Tools RFC Parameter Value Continuation Vulnerability

MIME::Tools is a Perl module designed to support processing of MIME encoded data. It has been reported that MIME::Tools does not support a method of encoding MIME parameters described in RFC 2231. This may result in a security vulnerability in software packages dependent on the module for security sensitive tasks such as email content scanning.

MIME::Tools RFC Parameter Value Continuation Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

MIME::Tools RFC Parameter Value Continuation Vulnerability

Solution:
An unofficial patch has been published. This has not been tested or confirmed by SecurityFocus:


Eryq MIME::Tools 5.4.11

• David F. Skoll mime-tools-patch.txt
  http://www.roaringpenguin.com/mimedefang/mime-tools-patch.txt

MIME::Tools RFC Parameter Value Continuation Vulnerability

References: