Clearswift MAILsweeper for SMTP 4.3.6 SP1 does not execute custom "on strip unsuccessful" hooks, which allows remote attackers to bypass e-mail attachment filtering policies via an attachment that MAILsweeper can detect but not remove.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-05-31T00:00:00

Updated: 2024-08-08T02:28:01.570Z

Reserved: 2007-05-30T00:00:00

Link: CVE-2003-1330

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2003-12-31T05:00:00.000

Modified: 2017-07-29T01:29:05.497

Link: CVE-2003-1330

cve-icon Redhat

No data.