Clearswift MAILsweeper for SMTP < 4.3.15 Multiple Vulnerabilities

medium Nessus Network Monitor Plugin ID 2048

Synopsis

The remote host is missing a critical security patch or upgrade.

Description

The remote host is running a vulnerable version of Clearswift MAILsweeper for SMTP. Clearswift MAILseeper for SMTP versions 4.3.14 and prior are reported to be prone to several security issues.

Solution

Upgrade to Clearswift MAILsweeper 4.3.15 or higher.

Plugin Details

Severity: Medium

ID: 2048

Family: SMTP Servers

Published: 8/18/2004

Updated: 3/6/2019

Risk Information

VPR

Risk Factor: Medium

Score: 5.8

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS v3

Risk Factor: Medium

Base Score: 4.3

Temporal Score: 4.3

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Temporal Vector: CVSS:3.0/E:H/RL:U/RC:X

Vulnerability Information

CPE: cpe:/a:clearswift:mailsweeper

Reference Information

CVE: CVE-2003-0121, CVE-2003-0928, CVE-2003-0929, CVE-2003-0930, CVE-2003-1154, CVE-2003-1330, CVE-2003-1477, CVE-2004-2328

BID: 3355, 7044, 7226, 7562, 8982, 9556, 10940, 10937

Detections

Analytics