Lucene search
HistoryMay 31, 2007 - 12:00 a.m.
CVE-2003-1330
clearswift
mailsweeper
smtp
sp1
e-mail
attachment
filtering
bypass
cve-2003-1330
nvd
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
7.4
Confidence
Low
EPSS
0.006
Percentile
79.3%
Clearswift MAILsweeper for SMTP 4.3.6 SP1 does not execute custom “on strip unsuccessful” hooks, which allows remote attackers to bypass e-mail attachment filtering policies via an attachment that MAILsweeper can detect but not remove.
Affected configurations
Node
microsoftall_windows
clearswift_limitedmailsweeperMatch4.3.6_sp1smtp
| Vendor | Product | Version | CPE |
|---|---|---|---|
| clearswift_limited | mailsweeper | 4.3.6+sp1 | cpe:/a:clearswift_limited:mailsweeper:4.3.6+sp1::: |
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
7.4
Confidence
Low
EPSS
0.006
Percentile
79.3%
Related for CVE-2003-1330