CVE-2004-2703 Clearswift MIMEsweeper 5.0.5, when it has been upgraded from MAILsweeper for SMTP version 4.3 or MAILsweeper Business Suite I or II, allows remote attackers to bypass scanning by including encrypted d...
MediumCVSS 4.3
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Clearswift MIMEsweeper 5.0.5, when it has been upgraded from MAILsweeper for SMTP version 4.3 or MAILsweeper Business Suite I or II, allows remote attackers to bypass scanning by including encrypted data in a mail message, which causes the message to be marked as "Clean" instead of "Encrypted".
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| clearswift mailsweeper business suite i | All versions | No fix listed |
| clearswift mailsweeper business suite ii | All versions | No fix listed |
| clearswift mailsweeper for smtp | = 4.3 | No fix listed |
| clearswift mimesweeper for web | = 5.0.5 | No fix listed |
References
- download.mimesweeper.com
- 13160 third-party-advisory vendor-advisory
- 11602 vdb-entry
- 11669 vdb-entry
- mimesweeper-smtp-scan-bypass(18035) vdb-entry