PatchTheCVEclearswift vulnerabilities
Recent CVEs affecting clearswift products. 24 tracked.
clearswift has 24 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2006-07-12. Highest priority: CVE-2004-0234 (score 64/100).
- CVE-2006-3523 MEDIUM 5.0 UPGRADE Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote attackers to cause a denial of service (cras
- CVE-2006-3522 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote
- CVE-2006-3216 MEDIUM 5.0 UPGRADE UPGRADE Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attacke
- CVE-2006-3215 HIGH 7.5 UPGRADE UPGRADE Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attacke
- CVE-2005-4526 MEDIUM 5.0 DOWNGRADE Clearswift MIMEsweeper For Web (a.k.a
- CVE-2004-2703 MEDIUM 4.3 MITIGATE MITIGATE Clearswift MIMEsweeper 5.0.5, when it has been upgraded from MAILsweeper for SMTP version 4.3 or MAILsweeper B
- CVE-2004-2328 MEDIUM 5.0 DOWNGRADE Clearswift MAILsweeper for SMTP before 4.3_13 allows remote attackers to cause a denial of service (infinite l
- CVE-2004-1715 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in MIMEsweeper for Web before 5.0.4 allows remote attackers or local users t
- CVE-2004-0235 MEDIUM 6.4 DOWNGRADE DOWNGRADE Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbit
- CVE-2004-0234 HIGH 10.0 DOWNGRADE DOWNGRADE Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products
- CVE-2004-0162 HIGH 7.5 DOWNGRADE DOWNGRADE Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions
- CVE-2004-0161 HIGH 7.5 DOWNGRADE DOWNGRADE Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions
- CVE-2004-0053 HIGH 7.5 DOWNGRADE DOWNGRADE Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions
- CVE-2004-0052 HIGH 7.5 DOWNGRADE DOWNGRADE Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions
- CVE-2004-0051 HIGH 7.5 DOWNGRADE DOWNGRADE Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions
- CVE-2003-1485 MEDIUM 5.0 DOWNGRADE Clearswift MAILsweeper 4.0 through 4.3.7 allows remote attackers to bypass filtering via a file attachment tha
- CVE-2003-1477 HIGH 7.8 DOWNGRADE MAILsweeper for SMTP 4.3.6 and 4.3.7 allows remote attackers to cause a denial of service (CPU consumption) vi
- CVE-2003-1154 HIGH 7.5 DOWNGRADE MAILsweeper for SMTP 4.3 allows remote attackers to bypass virus protection via a mail message with a malforme
- CVE-2003-1016 HIGH 7.5 DOWNGRADE DOWNGRADE Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions
- CVE-2003-1015 HIGH 7.5 DOWNGRADE DOWNGRADE Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions
- CVE-2003-0930 HIGH 7.5 UPGRADE Clearswift MAILsweeper before 4.3.15 does not properly detect filenames in BinHex (HQX) encoded files, which a
- CVE-2003-0929 HIGH 7.5 UPGRADE Clearswift MAILsweeper before 4.3.15 does not properly detect and filter ZIP 6.0 encoded files, which allows r
- CVE-2003-0928 HIGH 7.5 UPGRADE Clearswift MAILsweeper before 4.3.15 does not properly detect and filter RAR 3.20 encoded files, which allows
- CVE-2003-0121 HIGH 7.5 DOWNGRADE Clearswift MAILsweeper 4.x allows remote attackers to bypass attachment detection via an attachment that does
FAQ
How do I fix clearswift vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is clearswift being exploited right now?
None of the tracked clearswift CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which clearswift CVE should I patch first?
CVE-2004-0234 currently ranks highest (64/100): Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products.