PT-2005-5208 · Clearswift · Clearswift Mimesweeper For Web

CVE-2005-4526

·

Publicado

2005-12-28

·

Atualizado

2024-02-14

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Clearswift MIMEsweeper For Web (a.k.a. WEBsweeper) versions 4.0 through 5.1
Description The issue allows remote attackers to bypass filtering via a URL that does not include a .exe extension but returns an executable file.
Recommendations For versions 4.0 through 5.1, consider implementing additional filtering rules to inspect the content of files returned by URLs, regardless of the extension, to prevent the bypassing of filtering.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Identificadores relacionados

CVE-2005-4526

Produtos afetados

Clearswift Mimesweeper For Web