mailsweeper vulnerabilities and fixes

Recent CVEs affecting mailsweeper, with upgrade or downgrade steps. 18 tracked.

mailsweeper has 18 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2004-12-31. Highest priority: CVE-2004-0234 (score 64/100).

• CVE-2004-2328 MEDIUM 5.0 DOWNGRADE Clearswift MAILsweeper for SMTP before 4.3_13 allows remote attackers to cause a denial of service (infinite l
• CVE-2004-0235 MEDIUM 6.4 DOWNGRADE DOWNGRADE Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbit
• CVE-2004-0234 HIGH 10.0 DOWNGRADE DOWNGRADE Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products
• CVE-2004-0162 HIGH 7.5 DOWNGRADE DOWNGRADE Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions
• CVE-2004-0161 HIGH 7.5 DOWNGRADE DOWNGRADE Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions
• CVE-2004-0053 HIGH 7.5 DOWNGRADE DOWNGRADE Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions
• CVE-2004-0052 HIGH 7.5 DOWNGRADE DOWNGRADE Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions
• CVE-2004-0051 HIGH 7.5 DOWNGRADE DOWNGRADE Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions
• CVE-2003-1485 MEDIUM 5.0 DOWNGRADE Clearswift MAILsweeper 4.0 through 4.3.7 allows remote attackers to bypass filtering via a file attachment tha
• CVE-2003-1330 MEDIUM 5.0 DOWNGRADE Clearswift MAILsweeper for SMTP 4.3.6 SP1 does not execute custom "on strip unsuccessful" hooks, which allows
• CVE-2003-1154 HIGH 7.5 DOWNGRADE MAILsweeper for SMTP 4.3 allows remote attackers to bypass virus protection via a mail message with a malforme
• CVE-2003-1016 HIGH 7.5 DOWNGRADE DOWNGRADE Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions
• CVE-2003-1015 HIGH 7.5 DOWNGRADE DOWNGRADE Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions
• CVE-2003-0930 HIGH 7.5 UPGRADE Clearswift MAILsweeper before 4.3.15 does not properly detect filenames in BinHex (HQX) encoded files, which a
• CVE-2003-0929 HIGH 7.5 UPGRADE Clearswift MAILsweeper before 4.3.15 does not properly detect and filter ZIP 6.0 encoded files, which allows r
• CVE-2003-0928 HIGH 7.5 UPGRADE Clearswift MAILsweeper before 4.3.15 does not properly detect and filter RAR 3.20 encoded files, which allows
• CVE-2003-0121 HIGH 7.5 DOWNGRADE Clearswift MAILsweeper 4.x allows remote attackers to bypass attachment detection via an attachment that does
• CVE-2001-1581 HIGH 7.5 DOWNGRADE The File Blocker feature in Clearswift MAILsweeper for SMTP 4.2 allows remote attackers to bypass e-mail attac

FAQ

How do I fix mailsweeper vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is mailsweeper being exploited right now?

None of the tracked mailsweeper CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which mailsweeper CVE should I patch first?

CVE-2004-0234 currently ranks highest (64/100): Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products.

RSS feed for mailsweeper · ← Back to latest CVEs