PT-2003-2275 · Clearswift · Clearswift Mailsweeper For Smtp

Publicado 2003-12-31 · Atualizado 2017-07-29 · CVE-2003-1330

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Clearswift MAILsweeper for SMTP version 4.3.6 SP1

Description The issue allows remote attackers to bypass e-mail attachment filtering policies. This occurs when an attachment is detected but not removed by MAILsweeper, and custom "on strip unsuccessful" hooks are not executed.

Recommendations For Clearswift MAILsweeper for SMTP version 4.3.6 SP1, consider implementing additional filtering policies or workarounds to handle attachments that MAILsweeper can detect but not remove, as a temporary measure to mitigate the risk of policy bypass.

Correção

Identificadores relacionados

CVE-2003-1330

Produtos afetados

Clearswift Mailsweeper For Smtp

Referências · 4

• http://mimesweeper.com/download/bin/Patches/MAILsweeper_Patches_301_ReadMe.htm · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1330 · Nota de Segurança
• http://securityfocus.com/bid/7226 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11745 · Nota