Unscored severity · published Dec 31, 2003
CVE-2003-1485
Clearswift MAILsweeper 4.0 through 4.3.7 allows remote attackers to bypass filtering via a file attachment that contains "multiple extensions combined with large blocks of white…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Clearswift MAILsweeper 4.0 through 4.3.7 allows remote attackers to bypass filtering via a file attachment that contains "multiple extensions combined with large blocks of white space."
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
Mailsweeper · Clearswift
4.0; 4.1; 4.2; 4.3; 4.3.3; 4.3.4; +4 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-1485
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-1485
www.clearswift.com
http://www.clearswift.com/download/bin/Patches/ReadMe_SMTP_438.htm
Patch
http://www.securityfocus.com/bid/7568
More from Mailsweeper
–
CVE-2004-2328
Clearswift MAILsweeper for SMTP before 4.3_13 allows remote attackers to cause a denial of service (infinite loop) via an e-mail with a crafted RAR archive attached
–
CVE-2003-1015
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use whitespace in an unusual fashion, which…
–
CVE-2003-1016
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use malformed quoting in MIME headers,…
–
CVE-2004-0051
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard but frequently supported…
–
CVE-2004-0052
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard separator characters, or use…