CVE-2004-1098

CVE-2004-1098 describes a vulnerability in MIMEDefang, part of MIME-tools 5.414, which allows remote attackers to bypass virus scanning. This bypass is achieved by sending an email attachment containing a virus with an empty boundary string in its Content-Type header, affecting products from vendors like Mandrakesoft, Roaring Penguin, and SUSE. The vulnerability has a CVSS score of 7.5, indicating high severity with a network attack vector and low attack complexity, potentially leading to partial confidentiality, integrity, and availability impacts. Its FAUCET Risk Score is 85/100, further highlighting its significant risk. While there is no evidence of active exploitation (KEV: No) and no known public exploit code (Metasploit, Nuclei, ExploitDB: None), the vulnerability has garnered considerable community discussion with 10 mentions, suggesting awareness and potential interest among security researchers.