PT-2003-2275 · Clearswift · Clearswift Mailsweeper For Smtp

Published 2003-12-31 · Updated 2017-07-29 · CVE-2003-1330

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Clearswift MAILsweeper for SMTP version 4.3.6 SP1

Description The issue allows remote attackers to bypass e-mail attachment filtering policies. This occurs when an attachment is detected but not removed by MAILsweeper, and custom "on strip unsuccessful" hooks are not executed.

Recommendations For Clearswift MAILsweeper for SMTP version 4.3.6 SP1, consider implementing additional filtering policies or workarounds to handle attachments that MAILsweeper can detect but not remove, as a temporary measure to mitigate the risk of policy bypass.

Fix

Related Identifiers

CVE-2003-1330

Affected Products

Clearswift Mailsweeper For Smtp

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2003-1330 · Security Note
• http://mimesweeper.com/download/bin/Patches/MAILsweeper_Patches_301_ReadMe.htm · Note
• http://securityfocus.com/bid/7226 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11745 · Note