Vulnerability Details CVE-2004-2703
Clearswift MIMEsweeper 5.0.5, when it has been upgraded from MAILsweeper for SMTP version 4.3 or MAILsweeper Business Suite I or II, allows remote attackers to bypass scanning by including encrypted data in a mail message, which causes the message to be marked as "Clean" instead of "Encrypted".
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 46.1%
CVSS Severity
CVSS v2 Score 4.3
References
- http://download.mimesweeper.com/www/TechnicalDocumentation/MSWSMTP505UpdateReadMe.htm
- http://secunia.com/advisories/13160
- http://www.osvdb.org/11602
- http://www.securityfocus.com/bid/11669
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18035
- http://download.mimesweeper.com/www/TechnicalDocumentation/MSWSMTP505UpdateReadMe.htm
- http://secunia.com/advisories/13160
- http://www.osvdb.org/11602
- http://www.securityfocus.com/bid/11669
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18035
Products affected by CVE-2004-2703
-
cpe:2.3:a:clearswift:mailsweeper_business_suite_i:*
-
cpe:2.3:a:clearswift:mailsweeper_business_suite_ii:*
-
cpe:2.3:a:clearswift:mailsweeper_for_smtp:4.3
-
cpe:2.3:a:clearswift:mimesweeper_for_web:5.0.5