PT-2005-5208 · Clearswift · Clearswift Mimesweeper For Web
CVE-2005-4526
·
Publicado
2005-12-28
·
Atualizado
2024-02-14
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Clearswift MIMEsweeper For Web (a.k.a. WEBsweeper) versions 4.0 through 5.1
Description
The issue allows remote attackers to bypass filtering via a URL that does not include a .exe extension but returns an executable file.
Recommendations
For versions 4.0 through 5.1, consider implementing additional filtering rules to inspect the content of files returned by URLs, regardless of the extension, to prevent the bypassing of filtering.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Clearswift Mimesweeper For Web