Vulnerability in Clearswift Limited Mailsweeper
CVE-2003-1330
Clearswift MAILsweeper for SMTP 4.3.6 SP1 does not execute custom "on strip unsuccessful" hooks, which allows remote attackers to bypass e-mail attachment filtering policies via an attachment that MAILsweeper can detect but not remove.
EPSS: 0.014 (70.0th percentile) — read the EPSS interpretation.
Affected products
- Clearswift_limited Mailsweeper — versions 4.3.6_sp1
- Microsoft All_windows
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_BID)