CVE-2003-0930 — Mailsweeper vulnerability

3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.2%
top 61.81%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Clearswift Mailsweeper
Timeline
PublishedSep 28
Latest updateApr 29

Description

Clearswift MAILsweeper before 4.3.15 does not properly detect filenames in BinHex (HQX) encoded files, which allows remote attackers to bypass intended policy.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

Patches

Patch: www.corsaire.com ↗Patch: www.corsaire.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-rwpr-p2mx-4969: Clearswift MAILsweeper before 4↗2022-04-29
▶
CVEList
CVE-2003-0930: Clearswift MAILsweeper before 4↗2004-08-18
▶
CVE-2003-0930 — Clearswift Mailsweeper vulnerability | cvebase