PT-2003-1382 · Clearswift · Clearswift Mailsweeper

Martin Oneal · Published 2003-03-13 · Updated 2016-10-18 · CVE-2003-0121

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Clearswift MAILsweeper versions 4.x

Description The issue allows remote attackers to bypass attachment detection. This can occur when an attachment does not specify a MIME-Version header field, which can be processed by some mail clients.

Recommendations For Clearswift MAILsweeper versions 4.x, update the software to detect attachments without a MIME-Version header field to prevent bypassing of attachment detection.

Exploit

Fix

Related Identifiers

CVE-2003-0121

Affected Products

Clearswift Mailsweeper

References · 5

• 🔥 https://exploit-db.com/exploits/22338 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-0121 · Security Note
• http://securityfocus.com/bid/7044 · Vendor Advisory
• http://securityfocus.com/archive/1/316311 · Note
• http://marc.info/?l=bugtraq&m=104716030503607&w=2 · Note