A security flaw in ripMIME version 1.x allows attackers to bypass filtering software.
096acc5cdc5f1361b2c6174229e47b36ripMIME CHANGELOG
Format of entry line:
- <Developer initials>:<Change made for REL[ease] or DEV[elopment] versions>
CHANGES---------------------------------------------------------------
Fri Jul 30 2004
- PLD:REL:21H06
!!!!URGENT RELEASE!!!!
Released 1.3.2.3
There's viruses going around exploiting the ability to hide the
majority of their data in an attachment by using blank lines and
other tricks to make scanning systems prematurely terminate their
base64 decoding.
This release fixes that by ignoring consecutive CR checks in the
BASE64 data and rather attempting to treat it as a stream of data
with arbitary invalid bytes in it.
Comments
No comments yet, be the first!