Clearswift MAILsweeper For SMTP RAR Archive Denial Of Service Vulnerability

Bugtraq ID:	9556
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jan 29 2004 12:00AM
Updated:	Jan 29 2004 12:00AM
Credit:	The vendor announced this vulnerability.
Vulnerable:	Clearswift MailSweeper 4.3.13 Clearswift MailSweeper 4.3.11 Clearswift MailSweeper 4.3.10 Clearswift MailSweeper 4.3.8 Clearswift MailSweeper 4.3.7 Clearswift MailSweeper 4.3.6 SP1 Clearswift MailSweeper 4.3.6 Clearswift MailSweeper 4.3.5 Clearswift MailSweeper 4.3.4 Clearswift MailSweeper 4.3.3 Clearswift MailSweeper 4.3 - Microsoft Windows 2000 Advanced Server SP3 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Professional SP3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Server SP3 - Microsoft Windows 2000 Server SP2 Clearswift MailSweeper 4.2 Clearswift MailSweeper 4.1 Clearswift MailSweeper 4.0
Not Vulnerable:

Clearswift MAILsweeper For SMTP RAR Archive Denial Of Service Vulnerability

MAILsweeper has been reported prone to a remote denial of service vulnerability. The issue presents itself when MAILsweeper encounters an email that has a malicious RAR archive attached.

Clearswift MAILsweeper For SMTP RAR Archive Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Clearswift MAILsweeper For SMTP RAR Archive Denial Of Service Vulnerability

Solution:
The vendor has released a patch to address this issue. Customers are advised to obtain the appropriate patch from the Clearswift Limited Web site.


Clearswift MailSweeper 4.3.13

• Clearswift MAILsweeper for SMTP
  http://www.clearswift.com/download/SQL/downloadList.asp?productID=397

Clearswift MAILsweeper For SMTP RAR Archive Denial Of Service Vulnerability

References:

• Home Page (Clearswift)