CVE-2004-2328

Clearswift MAILsweeper for SMTP before 4.313 allows remote attackers to cause a denial of service infinite loop via an e-mail with a crafted RAR archive attached...

CVE-2004-2328

The CVE concerns Clearswift MAILsweeper for SMTP prior to version 4.3_13. It is triggered by processing an e-mail with a crafted RAR archive attached, causing an infinite loop and resulting in a denial of service. The vulnerability affects the SMTP‑scanning path of MAILsweeper and is described in...

CVE-2004-2328: Undefined Security Weakness

Clearswift MAILsweeper for SMTP before 4.313 allows remote attackers to cause a denial of service infinite loop via an e-mail with a crafted RAR archive attached...

CVE-2003-1154

CVE-2003-1154 affects MAILsweeper for SMTP 4.3. remote attackers could bypass virus protection by sending a mail with a malformed ZIP attachment, exploiting certain MIMAIL variants. The cited documents do not provide the vulnerable version ranges beyond 4.3, nor a confirmed patch or workaround. N...

CVE-2003-1154: Undefined Security Weakness

MAILsweeper for SMTP 4.3 allows remote attackers to bypass virus protection via a mail message with a malformed zip attachment, as exploited by certain MIMAIL virus variants...

CVE-2004-2328

Clearswift MAILsweeper for SMTP before 4.313 allows remote attackers to cause a denial of service infinite loop via an e-mail with a crafted RAR archive attached...

CVE-2003-0928

Clearswift MAILsweeper before 4.3.15 does not properly detect and filter RAR 3.20 encoded files, which allows remote attackers to bypass intended policy...

CVE-2003-0929

Clearswift MAILsweeper before 4.3.15 does not properly detect and filter ZIP 6.0 encoded files, which allows remote attackers to bypass intended policy...

CVE-2003-0930

Clearswift MAILsweeper before 4.3.15 does not properly detect filenames in BinHex HQX encoded files, which allows remote attackers to bypass intended policy...

MAILsweeper Archive File Filtering Bypass

The remote host is running MAILsweeper - a content security solution for SMTP. According to its banner, the remote version of MAILsweeper may allow an attacker to bypass the archive filtering settings of the remote server by sending an archive in the format 7ZIP, ACE, ARC, BH, BZIP2, HAP, IMG, PA...

CVE-2003-0930

CVE-2003-0930 affects Clearswift MAILsweeper prior to version 4.3.15 and arises from incorrect detection of filenames in BinHex (HQX) encoded files, allowing remote attackers to bypass the product’s policy enforcement. The vulnerability is exploitable remotely by sending HQX-encoded content, with...

CVE-2003-0928

Clearswift MAILsweeper before 4.3.15 does not properly detect and filter RAR 3.20 encoded files, which allows remote attackers to bypass intended policy...

CVE-2003-0929

Clearswift MAILsweeper before 4.3.15 does not properly detect and filter ZIP 6.0 encoded files, which allows remote attackers to bypass intended policy...

CVE-2003-0928

CVE-2003-0928 concerns Clearswift MAILsweeper prior to 4.3.15. The issue is that the product does not properly detect and filter RAR 3.20 encoded files, allowing remote attackers to bypass the product’s policy enforcement. The core impact is the circumvention of policy controls, enabling content ...

CVE-2003-0929

The provided data shows a concrete vulnerability: Clearswift MAILsweeper before version 4.3.15 fails to properly detect and filter ZIP 6.0 encoded files, allowing remote attackers to bypass policy. Affected product: MAILsweeper (SMTP) pre-4.3.15. Impact per sources: partial confidentiality, integ...

CVE-2003-0930

Clearswift MAILsweeper before 4.3.15 does not properly detect filenames in BinHex HQX encoded files, which allows remote attackers to bypass intended policy...

CVE-2003-0928: Undefined Security Weakness

Clearswift MAILsweeper before 4.3.15 does not properly detect and filter RAR 3.20 encoded files, which allows remote attackers to bypass intended policy...

Clearswift MAILsweeper for SMTP < 4.3.15 Multiple Vulnerabilities

Binary data 2048.prm...

CVE-2003-0929: Undefined Security Weakness

Clearswift MAILsweeper before 4.3.15 does not properly detect and filter ZIP 6.0 encoded files, which allows remote attackers to bypass intended policy...

CVE-2003-0930: Undefined Security Weakness

Clearswift MAILsweeper before 4.3.15 does not properly detect filenames in BinHex HQX encoded files, which allows remote attackers to bypass intended policy...