Unrated severityNVD Advisory· Published Jul 16, 2007· Updated Jun 16, 2026

CVE-2007-3803

Description

The SMTP ALG in Clavister CorePlus before 8.80.04, and 8.81.00, does not properly parse SMTP commands in certain circumstances, which allows remote attackers to bypass address blacklists.

Affected products

Clavister/CorePlus2 versions
cpe:2.3:a:clavister:clavister_coreplus:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:clavister:clavister_coreplus:*:*:*:*:*:*:*:*range: <=8.80.03
- (no CPE)range: <8.80.04, =8.81.00

Patches

Vulnerability mechanics

References

secunia.com/advisories/25957nvdVendor Advisory
osvdb.org/37974nvd
www.clavister.com/releasenotes/CorePlus_Release_Notes_8_80_04.pdfnvd
www.clavister.com/releasenotes/CorePlus_Release_Notes_8_81_01.pdfnvd
exchange.xforce.ibmcloud.com/vulnerabilities/35371nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000