Description
Clearswift MIMEsweeper 5.0.5, when it has been upgraded from MAILsweeper for SMTP version 4.3 or MAILsweeper Business Suite I or II, allows remote attackers to bypass scanning by including encrypted data in a mail message, which causes the message to be marked as "Clean" instead of "Encrypted".
References
- mimesweeper-smtp-scan-bypass(18035) vdb-entry
- 11669 vdb-entry
- 13160 third-party-advisory
- 11602 vdb-entry
- http://download.mimesweeper.com/www/TechnicalDocumentation/MSWSMTP505UpdateReadMe.htm