CVE

Id
27160  
CVE No.
CVE-2007-3803  
Status
Candidate  
Description
The SMTP ALG in Clavister CorePlus before 8.80.04, and 8.81.00, does not properly parse SMTP commands in certain circumstances, which allows remote attackers to bypass address blacklists.  
Phase
Assigned (20070716)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
278143 27160 CVE-2007-3803 CONFIRM:http://www.clavister.com/releasenotes/CorePlus_Release_Notes_8_80_04.pdf  View
278144 27160 CVE-2007-3803 CONFIRM:http://www.clavister.com/releasenotes/CorePlus_Release_Notes_8_81_01.pdf  View
278145 27160 CVE-2007-3803 OSVDB:37974  View
278146 27160 CVE-2007-3803 URL:http://osvdb.org/37974  View
278147 27160 CVE-2007-3803 SECUNIA:25957  View
278148 27160 CVE-2007-3803 URL:http://secunia.com/advisories/25957  View
278149 27160 CVE-2007-3803 XF:clavister-smtp-security-bypass(35371)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53666 JVNDB-2007-002358 Clavister CorePlus の IKE 実装におけるサービス運用妨害 (DoS) の脆弱性 Clavister CorePlus の IKE 実装は、IKE ネゴシエーション中に証明書を適切に検証しないため、サービス運用妨害 (ゲートウェイの中断) 状態となる脆弱性が存在します。 CVE-2007-3805 27160 5.4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002358.html  View