CVE-2003-1485

Published: Dec 31, 2003Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Clearswift MAILsweeper 4.0 through 4.3.7 allows remote attackers to bypass filtering via a file attachment that contains "multiple extensions combined with large blocks of white space."

Affected (10)

Products: Clearswift: Mailsweeper

Clearswift

1 product

Mailsweeper

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Clearswift Mailsweeper	Version 4.0
Clearswift Mailsweeper	Version 4.1
Clearswift Mailsweeper	Version 4.2
Clearswift Mailsweeper	Version 4.3.3
Clearswift Mailsweeper	Version 4.3.4
Clearswift Mailsweeper	Version 4.3.5
Clearswift Mailsweeper	Version 4.3.6
Clearswift Mailsweeper	Version 4.3.6_sp1
Clearswift Mailsweeper	Version 4.3.7
Clearswift Mailsweeper	Version 4.3

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

http://www.clearswift.com/download/bin/Patches/ReadMe_SMTP_438.htm

Source: cve@mitre.org

http://www.securityfocus.com/bid/7568

Source: cve@mitre.org

Patch

http://www.clearswift.com/download/bin/Patches/ReadMe_SMTP_438.htm

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/7568

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.