CVE-2004-2328 Clearswift MAILsweeper for SMTP before 4.3_13 allows remote attackers to cause a denial of service (infinite loop) via an e-mail with a crafted RAR archive attached.
MediumCVSS 5.0
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Clearswift MAILsweeper for SMTP before 4.3_13 allows remote attackers to cause a denial of service (infinite loop) via an e-mail with a crafted RAR archive attached.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| clearswift mailsweeper | = 4.0 | No fix listed |
| clearswift mailsweeper | = 4.1 | No fix listed |
| clearswift mailsweeper | = 4.2 | No fix listed |
| clearswift mailsweeper | = 4.3 | No fix listed |
| clearswift mailsweeper | = 4.3.3 | No fix listed |
| clearswift mailsweeper | = 4.3.4 | No fix listed |
| clearswift mailsweeper | = 4.3.5 | No fix listed |
| clearswift mailsweeper | = 4.3.6 | No fix listed |
| clearswift mailsweeper | = 4.3.6_sp1 | No fix listed |
| clearswift mailsweeper | = 4.3.7 | No fix listed |
| clearswift mailsweeper | = 4.3.8 | No fix listed |
| clearswift mailsweeper | = 4.3.10 | No fix listed |
| clearswift mailsweeper | = 4.3.11 | No fix listed |
| clearswift mailsweeper | = 4.3.13 | No fix listed |
References
- 3742 vdb-entry
- 10732 patch third-party-advisory vendor-advisory
- 9556 patch vdb-entry
- mailsweeper-smtp-rar-dos(14979) vdb-entry