Описание
Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of MIME-tools, has an Interpretation Conflict (relative to some mail user agents) when there are multiple boundary parameters in a MIME email message. Consequently, there can be an incorrect check for banned files or malware.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| amavisd-new | fixed | 1:2.13.0-5 | package | |
| amavisd-new | fixed | 1:2.13.0-3+deb12u1 | bookworm | package |
| amavisd-new | fixed | 1:2.11.1-5+deb11u1 | bullseye | package |
| amavisd-new | postponed | buster | package |
Примечания
https://gitlab.com/amavis/amavis/commit/78c4b7076ebf1d711629a95860aae1bc0db5277a (v2.13.1)
https://gitlab.com/amavis/amavis/commit/d921bc5208ce5b4e8f3e387a1d4e1f8fa4e85008 (v2.13.1)
https://gitlab.com/amavis/amavis/commit/c6c4a4c27c60194b68b617b7d3cfb033d6c587e2 (v2.13.1)
Patched amavisd-new version uses MIME::Entity->ambiguous_content if available
to get help on detecting an ambiguous email, or uses its own ambiguous_content
check if the available MIME::Tools are too old (<5.514).
Связанные уязвимости
Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of MIME-tools, has an Interpretation Conflict (relative to some mail user agents) when there are multiple boundary parameters in a MIME email message. Consequently, there can be an incorrect check for banned files or malware.
Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of MIME-tools, has an Interpretation Conflict (relative to some mail user agents) when there are multiple boundary parameters in a MIME email message. Consequently, there can be an incorrect check for banned files or malware.
Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of MIME-tools, has an Interpretation Conflict (relative to some mail user agents) when there are multiple boundary parameters in a MIME email message. Consequently, there can be an incorrect check for banned files or malware.
Уязвимость компонента MIME-tools контент-фильтра электронной почты Amavis, связанная с неправильным контролем доступа, позволяющая нарушителю повысить свои привилегии