CVE-2003-1330 Security feature bypass in n/a
Remote attackers can bypass email attachment filtering policies by sending attachments that the software detects but fails to remove due to a hook execution failure.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2003-1330?
CVE-2003-1330 is a medium-severity vulnerability in n/a, published on 31 May 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Clearswift MAILsweeper for SMTP 4.3.6 SP1 does not execute custom "on strip unsuccessful" hooks, which allows remote attackers to bypass e-mail attachment filtering policies via an attachment that MAILsweeper can detect but not remove.
Which versions are affected by CVE-2003-1330?
It affects 1 product.
Products include Clearswift Limited Mailsweeper.
How do I fix CVE-2003-1330?
No fix has been published for CVE-2003-1330 yet. Limit exposure of the affected software until one is available.
Is CVE-2003-1330 being exploited?
There is no known exploitation of CVE-2003-1330 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-fh94-5622-c6w9.