CVE-2004-2328: Medium severity Clearswift MAILsweeper vulnerability
Published Dec 31, 2004
·Updated
Clearswift MAILsweeper for SMTP before 4.313 allows remote attackers to cause a denial of service (infinite loop) via an e-mail with a crafted RAR archive attached.
Affected Software
14 affected components
Clearswift MAILsweeper=4.0
Clearswift MAILsweeper=4.1
Clearswift MAILsweeper=4.2
Clearswift MAILsweeper=4.3
Clearswift MAILsweeper=4.3.3
Clearswift MAILsweeper=4.3.4
Clearswift MAILsweeper=4.3.5
Clearswift MAILsweeper=4.3.6
Clearswift MAILsweeper=4.3.6_sp1
Clearswift MAILsweeper=4.3.7
Clearswift MAILsweeper=4.3.8
Clearswift MAILsweeper=4.3.10
Clearswift MAILsweeper=4.3.11
Clearswift MAILsweeper=4.3.13
Remediation
Patch Available
Patch Available
Event History
Dec 31, 2004
CVE Published
05:00 AM
Aug 16, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2328?
The severity of CVE-2004-2328 is classified as a denial of service vulnerability due to an infinite loop caused by a specially crafted RAR archive.
2
How do I fix CVE-2004-2328?
To fix CVE-2004-2328, you should upgrade Clearswift MAILsweeper to version 4.3_13 or later.
3
What versions of Clearswift MAILsweeper are affected by CVE-2004-2328?
CVE-2004-2328 affects Clearswift MAILsweeper versions prior to 4.3_13, including versions 4.0 to 4.3.12.
4
Can CVE-2004-2328 be exploited remotely?
Yes, CVE-2004-2328 can be exploited remotely by sending a maliciously crafted email with a RAR attachment.
5
What impact does CVE-2004-2328 have on systems?
CVE-2004-2328 can cause affected systems to enter an infinite loop, resulting in a denial of service.