Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Clearswift MAILsweeper 4.x allows remote attackers to bypass attachment detection via an attachment that does not specify a MIME-Version header field, which is processed by some mail clients.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Clearswift MailSweeper畸形MIME附件过滤绕过漏洞
Vulnerability Description
MAILsweeper产品提供基于策略的邮件内容安全过滤机制，可允许系统阻挡给予特殊内容类型的附件。 MAILsweeper不正确处理部分畸形封装的附件，远程攻击者利用这个漏洞绕过安全检查，直接把恶意附件提交给用户处理。 如果攻击者提交的邮件附件不包含'MIME-Version'字段，那么MailSweeper将不能辨别此附件为何种类型，也就是说，即使MailSweeper设定此附件类型(如可执行问类型)不能通过，由于不能判断畸形的附件内容，所以可使恶意邮件绕过检查，直接提交给最终用户处理，而一般的应用程
CVSS Information
N/A
Vulnerability Type
N/A