CVE-2007-3803

Published: Jul 16, 2007Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

The SMTP ALG in Clavister CorePlus before 8.80.04, and 8.81.00, does not properly parse SMTP commands in certain circumstances, which allows remote attackers to bypass address blacklists.

Affected (2)

Products: Clavister: Clavister Coreplus

Clavister

1 product

Clavister Coreplus

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Clavister Clavister Coreplus	Up to 8.80.03
Clavister Clavister Coreplus	Up to 8.81.00

References (10)

http://osvdb.org/37974

Source: cve@mitre.org

http://secunia.com/advisories/25957

Source: cve@mitre.org

Vendor Advisory

http://www.clavister.com/releasenotes/CorePlus_Release_Notes_8_80_04.pdf

Source: cve@mitre.org

http://www.clavister.com/releasenotes/CorePlus_Release_Notes_8_81_01.pdf

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/35371

Source: cve@mitre.org

http://osvdb.org/37974