CVE-2002-1121 - CVE House
Back to Database
Status published High CVE-2002-1121

SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP...

Vulnerability Description

SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of MIMEDefang before 2.21, and possibly other products, do not detect fragmented emails as defined in RFC2046 ("Message Fragmentation and Reassembly") and supported in such products as Outlook Express, which allows remote attackers to bypass content filtering, including virus checking, via fragmented emails of the message/partial content type.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2002-1121

Credits & Attribution

No credits recorded in the NVD database.

References

More from gfi

View All →
CVE-2021-29281
File upload vulnerability in GFI Mail Archiver versions up to...
Critical 9.8
CVE-2019-16414
A DOM based XSS in GFI Kerio Control v9.3.0 allows...
Medium 6.1
CVE-2017-7440
Kerio Connect 8.0.0 through 9.2.2, and Kerio Connect Client desktop...
Medium 6.5
CVE-2010-5254
Untrusted search path vulnerability in GFI Backup 3.1 Build 20100730...
Medium 6.9
CVE-2010-5181
Race condition in VIPRE Antivirus Premium 4.0.3272 on Windows XP...
Unknown 0

Affected Vendor

Affected Software

mailsecurity, webshield smtp, canit, mimedefang, interscan viruswall
Vulnerable Versions:
7.2, 4.0.5, 4.5, 4.5.44, 4.5.74.0, 1.2, 2.14, 2.20, 3.5, 3.51, 3.52

Timeline

Official Publish: September 14th, 2002
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.