Clearswift MAILsweeper for SMTP 4.3.6 SP1 does not execute custom "on strip unsuccessful" hooks, which allows remote attackers to bypass e-mail attachment filtering policies via an attachment that MAILsweeper can detect but not remove.
References
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2003-12-30 21:00
Updated : 2017-07-28 18:29
NVD link : CVE-2003-1330
Mitre link : CVE-2003-1330
JSON object : View
CWE
Products Affected
microsoft
- all_windows
clearswift_limited
- mailsweeper