PT-2003-1382 · Clearswift · Clearswift Mailsweeper

Martin Oneal · Publicado 2003-03-13 · Atualizado 2016-10-18 · CVE-2003-0121

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Clearswift MAILsweeper versions 4.x

Description The issue allows remote attackers to bypass attachment detection. This can occur when an attachment does not specify a MIME-Version header field, which can be processed by some mail clients.

Recommendations For Clearswift MAILsweeper versions 4.x, update the software to detect attachments without a MIME-Version header field to prevent bypassing of attachment detection.

Exploit

Correção

Identificadores relacionados

CVE-2003-0121

Produtos afetados

Clearswift Mailsweeper

Referências · 5

• 🔥 https://exploit-db.com/exploits/22338 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-0121 · Nota de Segurança
• http://securityfocus.com/archive/1/316311 · Nota
• http://marc.info/?l=bugtraq&m=104716030503607&w=2 · Nota
• http://securityfocus.com/bid/7044 · Aviso do Fabricante