Lucene search

[email protected]CVE-2004-2703

HistoryOct 06, 2007 - 9:00 p.m.

CVE-2004-2703

2007-10-0621:00:00

CWE-310

[email protected]

web.nvd.nist.gov

clearswift

mimesweeper

upgrade

vulnerability

remote attackers

scanning

encrypted data

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

7 High

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.3%

JSON

Clearswift MIMEsweeper 5.0.5, when it has been upgraded from MAILsweeper for SMTP version 4.3 or MAILsweeper Business Suite I or II, allows remote attackers to bypass scanning by including encrypted data in a mail message, which causes the message to be marked as “Clean” instead of “Encrypted”.

Affected configurations

NVD

Node

clearswiftmailsweeper_business_suite_i

clearswiftmailsweeper_business_suite_ii

clearswiftmailsweeper_for_smtpMatch4.3

clearswiftmimesweeper_for_webMatch5.0.5

CPENameOperatorVersion
clearswift:mailsweeper_business_suite_iclearswift mailsweeper business suite ieq*
clearswift:mailsweeper_business_suite_iiclearswift mailsweeper business suite iieq*
clearswift:mailsweeper_for_smtpclearswift mailsweeper for smtpeq4.3
clearswift:mimesweeper_for_webclearswift mimesweeper for webeq5.0.5

CPE	Name	Operator	Version
clearswift:mailsweeper_business_suite_i	clearswift mailsweeper business suite i	eq	*
clearswift:mailsweeper_business_suite_ii	clearswift mailsweeper business suite ii	eq	*
clearswift:mailsweeper_for_smtp	clearswift mailsweeper for smtp	eq	4.3
clearswift:mimesweeper_for_web	clearswift mimesweeper for web	eq	5.0.5

References

download.mimesweeper.com/www/TechnicalDocumentation/MSWSMTP505UpdateReadMe.htm

secunia.com/advisories/13160

www.osvdb.org/11602

www.securityfocus.com/bid/11669

exchange.xforce.ibmcloud.com/vulnerabilities/18035

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

7 High

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.3%

JSON

Related for CVE-2004-2703

nvd1 cvelist1