CVE-2005-4526 Clearswift MIMEsweeper For Web (a.k.a. WEBsweeper) 4.0 through 5.1 allows remote attackers to bypass filtering via a URL that does not include a .exe extension but returns an executable file.
MediumCVSS 5.0
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Clearswift MIMEsweeper For Web (a.k.a. WEBsweeper) 4.0 through 5.1 allows remote attackers to bypass filtering via a URL that does not include a .exe extension but returns an executable file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| clearswift mimesweeper for web | = 4.0 | No fix listed |
| clearswift mimesweeper for web | = 5.0.1 | No fix listed |
| clearswift mimesweeper for web | = 5.0.2 | No fix listed |
| clearswift mimesweeper for web | = 5.0.3 | No fix listed |
| clearswift mimesweeper for web | = 5.0.4 | No fix listed |
| clearswift mimesweeper for web | = 5.0.5 | No fix listed |
| clearswift mimesweeper for web | = 5.1 | No fix listed |
References
- www.digitalarmaments.com exploit url-repurposed
- 20051220 Digital Armaments Security Advisory 12.20.2005: WEBsweeper/MIMEsweeper Executable File Content Check bypass Vulnerability mailing-list
- 15982 vdb-entry
- mimesweeper-attachment-filter-bypass(23867) vdb-entry