CVE-2007-3803

critical

Description

The SMTP ALG in Clavister CorePlus before 8.80.04, and 8.81.00, does not properly parse SMTP commands in certain circumstances, which allows remote attackers to bypass address blacklists.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/35371

http://www.clavister.com/releasenotes/CorePlus_Release_Notes_8_81_01.pdf

http://www.clavister.com/releasenotes/CorePlus_Release_Notes_8_80_04.pdf

http://secunia.com/advisories/25957

http://osvdb.org/37974

Details

Source: Mitre, NVD

Published: 2007-07-16

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N