A security flaw in ripMIME version 1.x allows attackers to bypass filtering software.
1149ac92bd31c03d520f85fdf4148ad5d0356181a7f051c3a3dc6ae6132c231a
ripMIME CHANGELOG
Format of entry line:
- <Developer initials>:<Change made for REL[ease] or DEV[elopment] versions>
CHANGES---------------------------------------------------------------
Fri Jul 30 2004
- PLD:REL:21H06
!!!!URGENT RELEASE!!!!
Released 1.3.2.3
There's viruses going around exploiting the ability to hide the
majority of their data in an attachment by using blank lines and
other tricks to make scanning systems prematurely terminate their
base64 decoding.
This release fixes that by ignoring consecutive CR checks in the
BASE64 data and rather attempting to treat it as a stream of data
with arbitary invalid bytes in it.