69 matches found
CVE-2003-1330
Technical details about CVE-2003-1330 are not provided in the connected documents. The initial description summarizes the vulnerability as bypass of e-mail attachment filtering via an undetected attachment. Monitor for official advisories or patches.
CVE-2001-1581
The CVE-2001-1581 affects Clearswift MAILsweeper for SMTP 4.2, where the File Blocker feature can be bypassed by attackers manipulating a Content-Type header filename, enabling bypass of attachment filtering policies. Impact per CVSS2: Network attack, low complexity, no authentication required, w...
CVE-2001-1581
The File Blocker feature in Clearswift MAILsweeper for SMTP 4.2 allows remote attackers to bypass e-mail attachment filtering policies via a modified name in a Content-Type header...
CVE-2003-1330
Clearswift MAILsweeper for SMTP 4.3.6 SP1 does not execute custom "on strip unsuccessful" hooks, which allows remote attackers to bypass e-mail attachment filtering policies via an attachment that MAILsweeper can detect but not remove...
CVE-2006-3216
Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to cause a denial of service via 1 non-ASCII characters in a reverse DNS lookup result from a Received header, which leads to a Receiver service stop, and 2 unspecified vectors involvi...
CVE-2006-3215
Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to bypass the "text analysis", possibly bypassing SPAM and other filters, by sending an e-mail specifying a non-existent or unrecognized character set...
CVE-2006-3215
Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to bypass the "text analysis", possibly bypassing SPAM and other filters, by sending an e-mail specifying a non-existent or unrecognized character set...
CVE-2006-3215
CVE-2006-3215 affects Clearswift MAILsweeper for SMTP (before 4.3.20) and MAILsweeper for Exchange (before 4.3.20). The issue allows remote attackers to bypass the product’s text analysis and potentially bypass SPAM/other filters by sending an e-mail with a non-existent or unrecognized character ...
CVE-2006-3216
Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to cause a denial of service via 1 non-ASCII characters in a reverse DNS lookup result from a Received header, which leads to a Receiver service stop, and 2 unspecified vectors involvi...
CVE-2006-3216
The CVE-2006-3216 issue affects Clearswift MAILsweeper for SMTP prior to 4.3.20 and MAILsweeper for Exchange prior to 4.3.20. The root cause is a vulnerability in handling certain inputs that can trigger a denial of service: (1) non-ASCII characters in a reverse DNS lookup result from a Received ...
Multiple MailSweeper MIMESweeper mail filters security vulnerabilities
DoS conditions, filtering bypass...
[SA20756] MAILsweeper for SMTP/Exchange Multiple Vulnerabilities
---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...
Clearswift MAILsweeper for SMTP < 4.3.20 Multiple Vulnerabilities
Binary data 3659.prm...
CVE-2004-2328
Clearswift MAILsweeper for SMTP before 4.313 allows remote attackers to cause a denial of service infinite loop via an e-mail with a crafted RAR archive attached...
CVE-2004-2328
The CVE concerns Clearswift MAILsweeper for SMTP prior to version 4.3_13. It is triggered by processing an e-mail with a crafted RAR archive attached, causing an infinite loop and resulting in a denial of service. The vulnerability affects the SMTP‑scanning path of MAILsweeper and is described in...
CVE-2003-1154
CVE-2003-1154 affects MAILsweeper for SMTP 4.3. remote attackers could bypass virus protection by sending a mail with a malformed ZIP attachment, exploiting certain MIMAIL variants. The cited documents do not provide the vulnerable version ranges beyond 4.3, nor a confirmed patch or workaround. N...
CVE-2004-2328
Clearswift MAILsweeper for SMTP before 4.313 allows remote attackers to cause a denial of service infinite loop via an e-mail with a crafted RAR archive attached...
CVE-2003-0929
Clearswift MAILsweeper before 4.3.15 does not properly detect and filter ZIP 6.0 encoded files, which allows remote attackers to bypass intended policy...