Description
Sophos Anti-Virus 3.78 allows remote attackers to bypass virus scanning by using a qmail generated Delivery Status Notification (DSN) where the original email is not included in the bounce message.
References
- 1009042 vdb-entry
- 10855 third-party-advisory
- sophos-email-virus-undetected(15192) vdb-entry
- http://www.sophos.com/support/news/#mime-378
- 9650 vdb-entry