CVE-2003-0121

Description

Clearswift MAILsweeper 4.x allows remote attackers to bypass attachment detection via an attachment that does not specify a MIME-Version header field, which is processed by some mail clients.

Affected products

• clearswift / mailsweeper4.0 – 4.0
• clearswift / mailsweeper4.1 – 4.1
• clearswift / mailsweeper4.2 – 4.2
• clearswift / mailsweeper4.3 – 4.3

Exploits & proofs of concept

• exploit-dbClearswift MAILsweeper 4.x - MIME Attachment Filter Bypassby http-equiv

References

• MAILING_LISThttp://marc.info/?l=bugtraq&m=104716030503607&w=2
• MISChttp://www.securityfocus.com/archive/1/316311
• MISChttp://www.securityfocus.com/bid/7044