CVE-2003-1485

Clearswift MAILsweeper 4.0 through 4.3.7 allows remote attackers to bypass filtering via a file attachment that contains "multiple extensions combined with large blocks of white space."...

CVE-2004-2703

Clearswift MIMEsweeper 5.0.5, when it has been upgraded from MAILsweeper for SMTP version 4.3 or MAILsweeper Business Suite I or II, allows remote attackers to bypass scanning by including encrypted data in a mail message, which causes the message to be marked as "Clean" instead of "Encrypted"...

CVE-2004-2703

The CVE-2004-2703 entry concerns Clearswift MIMEsweeper 5.0.5, upgraded from MAILsweeper SMTP versions, where remote data that is encrypted within a mail message can bypass scanning and be marked as Clean rather than Encrypted. This describes the affected product/function (MIMEsweeper 5.0.5 after...

CVE-2003-1330

Technical details about CVE-2003-1330 are not provided in the connected documents. The initial description summarizes the vulnerability as bypass of e-mail attachment filtering via an undetected attachment. Monitor for official advisories or patches.

CVE-2001-1581

The CVE-2001-1581 affects Clearswift MAILsweeper for SMTP 4.2, where the File Blocker feature can be bypassed by attackers manipulating a Content-Type header filename, enabling bypass of attachment filtering policies. Impact per CVSS2: Network attack, low complexity, no authentication required, w...

CVE-2003-1330

Clearswift MAILsweeper for SMTP 4.3.6 SP1 does not execute custom "on strip unsuccessful" hooks, which allows remote attackers to bypass e-mail attachment filtering policies via an attachment that MAILsweeper can detect but not remove...

CVE-2001-1581

The File Blocker feature in Clearswift MAILsweeper for SMTP 4.2 allows remote attackers to bypass e-mail attachment filtering policies via a modified name in a Content-Type header...

CVE-2006-3523

Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote attackers to cause a denial of service crash via an encrypted archived .RAR file, which triggers a scan error and causes the Web Policy Engine service to terminate...

CVE-2006-3522

Cross-site scripting XSS vulnerability in Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote attackers to inject arbitrary web script or HTML via the URL, which is reflected back in an error message when trying to access a blocked web site...

CVE-2006-3523

The vulnerability CVE-2006-3523 affects Clearswift MIMEsweeper for Web prior to 5.1.15 Hotfix. A remote attacker can cause a denial of service by sending an encrypted archived .RAR file that triggers a scan error, causing the Web Policy Engine service to terminate. Affected products: Clearswift M...

CVE-2006-3523

Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote attackers to cause a denial of service crash via an encrypted archived .RAR file, which triggers a scan error and causes the Web Policy Engine service to terminate...

CVE-2006-3522

CVE-2006-3522 affects Clearswift MIMEsweeper for Web (pre-5.1.15 Hotfix). The issue is a cross-site scripting (XSS) vulnerability where attacker-supplied input in a URL is reflected back in an error message when accessing a blocked site, enabling remote.script injection. The root cause is an impr...

CVE-2006-3522

Cross-site scripting XSS vulnerability in Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote attackers to inject arbitrary web script or HTML via the URL, which is reflected back in an error message when trying to access a blocked web site...

mimesweeperXSS.txt

This is a multi-part message in MIME format. ------=NextPart00101C6A369.3FE6BA2F Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable =20 MIMESweeper For Web 5.X Cross Site Scripting =20 =20 I. INTRODUCTION =20 MIMESweeper For Web is a policy-based content...

KLA10251 DoS vulnerability in Clearswift MIMEsweeper

An unspecified vulnerability was found in Clearswift MIMEsweeper. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed RAR file. Original advisories - Related products MIMEsweeper-for-Web CVE list...

[Full-disclosure] MIMESweeper For Web 5.X Cross Site Scripting

MIMESweeper For Web 5.X Cross Site Scripting I. INTRODUCTION MIMESweeper For Web is a policy-based content security for web applications. It analyzes web content and blocks pages or files that are prohibited by the organizational security policy. For more Information please refer to:...

CVE-2006-3216

Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to cause a denial of service via 1 non-ASCII characters in a reverse DNS lookup result from a Received header, which leads to a Receiver service stop, and 2 unspecified vectors involvi...

CVE-2006-3215

Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to bypass the "text analysis", possibly bypassing SPAM and other filters, by sending an e-mail specifying a non-existent or unrecognized character set...

CVE-2006-3215

Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to bypass the "text analysis", possibly bypassing SPAM and other filters, by sending an e-mail specifying a non-existent or unrecognized character set...

CVE-2006-3216

Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to cause a denial of service via 1 non-ASCII characters in a reverse DNS lookup result from a Received header, which leads to a Receiver service stop, and 2 unspecified vectors involvi...