CVE:CVE-2003-1330
CNNVD:CNNVD-200312-429
SMTP 4.3.6 SP1版本的Clearswift MAILsweeper不能执行传统的"on strip unsuccessful" hooks。远程攻击者可以借助MAILsweeper能检查却不能删除的附件绕过邮件附件过滤策略。
solution:Upgrade clearswift_limited mailsweeper to a higher version than 4.3.6_sp1,and avoid the version 4.3.6_sp1
solution:Upgrade bajie java_http_server to a higher version than 0.95:zxc,0.95:zxe,and avoid the version 0.95:zxc,0.95:zxe