CVE-2003-0929 — Mailsweeper vulnerability

3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.3%
top 45.70%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Clearswift Mailsweeper
Timeline
PublishedSep 28
Latest updateApr 29

Description

Clearswift MAILsweeper before 4.3.15 does not properly detect and filter ZIP 6.0 encoded files, which allows remote attackers to bypass intended policy.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

Patches

Patch: www.corsaire.com ↗Patch: www.corsaire.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-w94v-3923-7chh: Clearswift MAILsweeper before 4↗2022-04-29
▶
CVEList
CVE-2003-0929: Clearswift MAILsweeper before 4↗2004-08-18
▶
CVE-2003-0929 — Clearswift Mailsweeper vulnerability | cvebase