CVE-2004-2088 Information

Description

Sophos Anti-Virus 3.78 allows remote attackers to bypass virus scanning by using a qmail generated Delivery Status Notification (DSN) where the original email is not included in the bounce message.

Reference

http://secunia.com/advisories/10855 http://securitytracker.com/id?1009042 http://www.securityfocus.com/bid/9650 http://www.sophos.com/support/news/mime-378 https://exchange.xforce.ibmcloud.com/vulnerabilities/15192