Multiple Vendor Email Message Fragmentation SMTP Filter Bypass Vulnerability

Bugtraq ID:	5696
Class:	Design Error
CVE:	CVE-2002-1121
Remote:	Yes
Local:	No
Published:	Sep 12 2002 12:00AM
Updated:	Jul 11 2009 05:06PM
Credit:	Vulnerability reported by Aviram Jenik <[email protected]>.
Vulnerable:	Trend Micro InterScan VirusWall for Windows NT 3.52 - Microsoft Windows NT Enterprise Server 4.0 SP6a - Microsoft Windows NT Enterprise Server 4.0 SP6 - Microsoft Windows NT Enterprise Server 4.0 SP5 - Microsoft Windows NT Enterprise Server 4.0 SP4 - Microsoft Windows NT Enterprise Server 4.0 SP3 - Microsoft Windows NT Enterprise Server 4.0 SP2 - Microsoft Windows NT Enterprise Server 4.0 SP1 - Microsoft Windows NT Enterprise Server 4.0 - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP5 - Microsoft Windows NT Server 4.0 SP4 - Microsoft Windows NT Server 4.0 SP3 - Microsoft Windows NT Server 4.0 SP2 - Microsoft Windows NT Server 4.0 SP1 - Microsoft Windows NT Server 4.0 - Microsoft Windows NT Terminal Server 4.0 SP6 - Microsoft Windows NT Terminal Server 4.0 SP5 - Microsoft Windows NT Terminal Server 4.0 SP4 - Microsoft Windows NT Terminal Server 4.0 SP3 - Microsoft Windows NT Terminal Server 4.0 SP2 - Microsoft Windows NT Terminal Server 4.0 SP1 - Microsoft Windows NT Terminal Server 4.0 alpha - Microsoft Windows NT Terminal Server 4.0 - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 Trend Micro InterScan VirusWall for Windows NT 3.51 - Microsoft Windows NT 3.5.1 SP5 - Microsoft Windows NT 3.5.1 SP4 - Microsoft Windows NT 3.5.1 SP3 - Microsoft Windows NT 3.5.1 SP2 - Microsoft Windows NT 3.5.1 SP1 - Microsoft Windows NT 3.5.1 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Microsoft Windows NT 3.5 Trend Micro InterScan VirusWall for Windows NT 3.5 - Microsoft Windows NT 3.5.1 SP5 - Microsoft Windows NT 3.5.1 SP4 - Microsoft Windows NT 3.5.1 SP3 - Microsoft Windows NT 3.5.1 SP2 - Microsoft Windows NT 3.5.1 SP1 - Microsoft Windows NT 3.5 Roaring Penguin Software MIMEDefang 2.21 Roaring Penguin Software MIMEDefang 2.20 Roaring Penguin Software MIMEDefang 2.14 Roaring Penguin Software CanIt 1.2 Network Associates WebShield SMTP 4.5.74 .0 - Microsoft Windows NT 4.0 Network Associates WebShield SMTP 4.5.44 - Microsoft Windows NT 4.0 Network Associates WebShield SMTP 4.5 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 Network Associates WebShield SMTP 4.0.5 - Microsoft Windows NT 4.0 GFI MailSecurity for Exchange/SMTP 7.2
Not Vulnerable:	Roaring Penguin Software MIMEDefang 2.21 Roaring Penguin Software CanIt 1.2 -F17 Network Associates WebShield e500 Network Associates WebShield e250 Finjan Software SurfinGate 6.0 1 Finjan Software SurfinGate 6.0 Finjan Software SurfinGate 4.0 Check Point Software Next Generation FP2 Check Point Software Firewall-1 4.1 SP5

Multiple Vendor Email Message Fragmentation SMTP Filter Bypass Vulnerability

There is no exploit code necessary for this vulnerability. Exploitation simply requires an email client capable of sending a single message as fragments.