medium4.3
CVE-2004-2703
Clearswift MIMEsweeper 5.0.5, when it has been upgraded from MAILsweeper for SMTP version 4.3 or MAILsweeper Business Suite I or II, allows remote attackers to…
Impact
Clearswift MIMEsweeper 5.0.5, when it has been upgraded from MAILsweeper for SMTP version 4.3 or MAILsweeper Business Suite I or II, allows remote attackers to bypass scanning by including encrypted data in a mail message, which causes the message to be marked as "Clean" instead of "Encrypted".
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Clearswift | Mailsweeper Business Suite I | All versions |
| Clearswift | Mailsweeper Business Suite Ii | All versions |
| Clearswift | Mailsweeper For Smtp | Version 4.3 |
| Clearswift | Mimesweeper For Web | Version 5.0.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://download.mimesweeper.com/www/TechnicalDocumentation/MSWSMTP505UpdateReadMe.htm
- http://secunia.com/advisories/13160
- http://www.osvdb.org/11602
- http://www.securityfocus.com/bid/11669
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18035
- http://download.mimesweeper.com/www/TechnicalDocumentation/MSWSMTP505UpdateReadMe.htm
- http://secunia.com/advisories/13160
- http://www.osvdb.org/11602
- http://www.securityfocus.com/bid/11669
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18035