laitcg Pop 3 Scan Renattach Malicious Attachment Scanning Bypass Vulnerability

Bugtraq ID:	9252
Class:	Configuration Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 18 2003 12:00AM
Updated:	Dec 18 2003 12:00AM
Credit:	The disclosure of this issue has been credited to the vendor.
Vulnerable:	laitcg Pop 3 scan 1.0 -rc5
Not Vulnerable:	laitcg Pop 3 scan 1.0 -rc6

laitcg Pop 3 Scan Renattach Malicious Attachment Scanning Bypass Vulnerability

It has been reported that laitcg Pop 3 Scan may be affected by a vulnerability that could allow malicious attachments to pass through to the user. It has been reported that when Pop 3 Scan is used with renattach, the software may not identify malicious attachments and therefore allow malicious code to pass through undetected. This could also cause users to assume that the attachment is safe, which would create a false sense of security.

laitcg Pop 3 Scan version 1.0-rc5 has been reported to be vulnerable to this issue.

laitcg Pop 3 Scan Renattach Malicious Attachment Scanning Bypass Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

laitcg Pop 3 Scan Renattach Malicious Attachment Scanning Bypass Vulnerability

Solution:
The vendor has released Pop 3 Scan version 1.0-rc6 to address this issue.


laitcg Pop 3 scan 1.0 -rc5

• laitcg 1.0-rc6
  http://prdownloads.sourceforge.net/p3scan/p3scan-1.0-rc6.tar.gz?downlo ad

laitcg Pop 3 Scan Renattach Malicious Attachment Scanning Bypass Vulnerability

References:

• Pop 3 Scan (Freshmeat)