CVE-2003-0930 Clearswift MAILsweeper before 4.3.15 does not properly detect filenames in BinHex (HQX) encoded files, which allows remote attackers to bypass intended policy.
HighCVSS 7.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Clearswift MAILsweeper before 4.3.15 does not properly detect filenames in BinHex (HQX) encoded files, which allows remote attackers to bypass intended policy.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| clearswift mailsweeper | <= 4.3.15 | No fix listed |
References
- 20040813 Corsaire Security Advisory - Clearswift MAILsweeper multiple encoding/compression issues mailing-list
- www.corsaire.com patch vendor-advisory