CVE-2007-3803

2007-07-1623:00:00

mitre

www.cve.org

AI Score

6.9

Confidence

Low

EPSS

0.017

Percentile

88.2%

JSON

The SMTP ALG in Clavister CorePlus before 8.80.04, and 8.81.00, does not properly parse SMTP commands in certain circumstances, which allows remote attackers to bypass address blacklists.

References

osvdb.org/37974

secunia.com/advisories/25957

www.clavister.com/releasenotes/CorePlus_Release_Notes_8_80_04.pdf

www.clavister.com/releasenotes/CorePlus_Release_Notes_8_81_01.pdf

exchange.xforce.ibmcloud.com/vulnerabilities/35371