Clearswift vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2006-3215 Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to bypass the "text analysis", possibly bypassiHigh 7.5 · Jun 23, 2006
• CVE-2003-1015 Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use whitespace in an unusuHigh 7.5 · Oct 20, 2004
• CVE-2003-1016 Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use malformed quoting in MHigh 7.5 · Oct 20, 2004
• CVE-2004-0051 Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard but frequHigh 7.5 · Oct 20, 2004
• CVE-2004-0052 Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard separatorHigh 7.5 · Oct 20, 2004
• CVE-2004-0053 Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use fields that use RFC204High 7.5 · Oct 20, 2004
• CVE-2004-0161 Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use RFC2231 encoding, whicHigh 7.5 · Oct 20, 2004
• CVE-2004-0162 Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME encapsulation that uses RFC822 comment fHigh 7.5 · Oct 20, 2004
• CVE-2003-0928 Clearswift MAILsweeper before 4.3.15 does not properly detect and filter RAR 3.20 encoded files, which allows remote attackers to bypass intended policy.High 7.5 · Sep 28, 2004
• CVE-2003-0929 Clearswift MAILsweeper before 4.3.15 does not properly detect and filter ZIP 6.0 encoded files, which allows remote attackers to bypass intended policy.High 7.5 · Sep 28, 2004
• CVE-2003-0930 Clearswift MAILsweeper before 4.3.15 does not properly detect filenames in BinHex (HQX) encoded files, which allows remote attackers to bypass intended policy.High 7.5 · Sep 28, 2004
• CVE-2004-0234 Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attHigh 10 · Aug 18, 2004
• CVE-2003-1154 MAILsweeper for SMTP 4.3 allows remote attackers to bypass virus protection via a mail message with a malformed zip attachment, as exploited by certain MIMAIL vHigh 7.5 · Dec 31, 2003
• CVE-2003-1477 MAILsweeper for SMTP 4.3.6 and 4.3.7 allows remote attackers to cause a denial of service (CPU consumption) via a PowerPoint attachment that either (1) is corruHigh 7.8 · Dec 31, 2003
• CVE-2003-0121 Clearswift MAILsweeper 4.x allows remote attackers to bypass attachment detection via an attachment that does not specify a MIME-Version header field, which is High 7.5 · Mar 18, 2003
• CVE-2001-1581 The File Blocker feature in Clearswift MAILsweeper for SMTP 4.2 allows remote attackers to bypass e-mail attachment filtering policies via a modified name in a High 7.5 · Dec 31, 2001