Vulnerability in Clearswift Mailsweeper Business Suite I
CVE-2004-2703
Clearswift MIMEsweeper 5.0.5, when it has been upgraded from MAILsweeper for SMTP version 4.3 or MAILsweeper Business Suite I or II, allows remote attackers to bypass scanning by including encrypted data in a mail message, which causes the message to be marked as "Clean" instead of "Encrypted".
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.011 (62.8th percentile) — read the EPSS interpretation.
Affected products
- Clearswift Mailsweeper_business_suite_i
- Clearswift Mailsweeper_business_suite_ii
- Clearswift Mailsweeper_for_smtp — versions 4.3
- Clearswift Mimesweeper_for_web — versions 5.0.5
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (x_refsource_CONFIRM)