CVE-2003-1154 Security feature bypass in n/a
Remote attackers can bypass virus protection in MAILsweeper for SMTP by sending emails with malformed zip attachments, allowing malicious code to reach recipients.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2003-1154?
CVE-2003-1154 is a high-severity vulnerability in n/a, published on 10 May 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
MAILsweeper for SMTP 4.3 allows remote attackers to bypass virus protection via a mail message with a malformed zip attachment, as exploited by certain MIMAIL virus variants.
Which versions are affected by CVE-2003-1154?
It affects 1 product.
Products include Clearswift Mailsweeper.
How do I fix CVE-2003-1154?
No fix has been published for CVE-2003-1154 yet. Limit exposure of the affected software until one is available.
Is CVE-2003-1154 being exploited?
There is no known exploitation of CVE-2003-1154 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-4pwr-f9qj-c4hf.