Virus Scan software from multiple vendors contains a flaw that may allow a remote attacker to bypass SMTP content filters. The problem is that the antivirus gateways fail to reassemble and scan mail messages, if they are sent in the message/partial format. It is possible that the flaw may allow malicious files to bypass antivirus gateways, resulting in a loss of integrity.
Classification
Location:
Remote / Network Access
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Public
Solution
Consult your vendor for upgrades. An upgrade is required as there are no known workarounds.
securiteam.com -
Beyond-Security
