ReadMe for MIMEsweeper for Web 5.1 Hotfix 5.1.15

MIMEsweeper^TM for Web Hotfix 5.1.15

This ReadMe describes the problems solved by this hotfix for MIMEsweeper for Web, lists the prerequisites for and contents of the hotfix, and explains how to install and remove the hotfix.

Warning:

Clearswift strongly recommends that you install this hotfix at the earliest opportunity. It fixes a potential security vulnerability that could allow a script to run on a user's browser.

You can install this hotfix whether or not MIMEsweeper for Web Hotfixes 5.1.13 and 5.1.14 have been installed.

This document contains the following topics:

Hotfix description
Prerequisites
Installing the hotfix
Removing the hotfix
Files included in this hotfix

Contact Information

We are constantly reviewing our products. You can obtain product patches, information about our other products, and details for contacting us on our website: http://www.clearswift.com/.

Hotfix description

This hotfix provides solutions to the following problems:

In some limited circumstances it was possible for MIMEsweeper for Web to allow a script to run on a user's browser even though a web page was successfully blocked.
When MIMEsweeper for Web scanned an encrypted .RAR archive file, the scan caused an error and the Web Policy Engine service terminated unexpectedly.

Back to Contents

Prerequisites

You must only install this hotfix on the following version of MIMEsweeper for Web: MIMEsweeper for Web 5.1. You can install this hotfix whether or not MIMEsweeper for Web Hotfixes 5.1.13 and 5.1.14 have been installed, but you are recommended to install all hotfixes.
You must log on to the Administrator account that originally installed MIMEsweeper for Web 5.1.

Warning:

Before installing this hotfix, you must ensure that you are using the correct version of MIMEsweeper for Web.

Back to Contents

Installing the hotfix

Before installing this hotfix, you must read the Prerequisites section of this ReadMe.

Note:

This hotfix must be installed on all MIMEsweeper for Web Proxy machines.

To install this hotfix:

Stop the Clearswift Web Proxy Engine service.
Navigate to the MIMEsweeper for Web Program folder (by default, C:\Program Files\Clearswift\MIMEsweeper for Web\Program). As a precaution, and to enable you to remove the hotfix later if required, rename the files fml15.dll, http.dll and wpl.dll. For example, rename wpl.dll to 5112wpl.dll.
Navigate to the new files fml15.dll, http.dll and wpl.dll on your installation media.
Copy the new files to the Program folder (by default, C:\Program Files\Clearswift\MIMEsweeper for Web\Program).
Restart the Clearswift Web Proxy Engine service.

Back to Contents

Removing the hotfix

If you experience problems after installing this hotfix, you can remove it.

To remove the hotfix:

Stop the Clearswift Web Proxy Engine service.
Navigate to the MIMEsweeper for Web Program folder (by default, C:\Program Files\Clearswift\MIMEsweeper for Web\Program).
Remove the files fml15.dll, http.dll and wpl.dll.
In the same folder, change the files you renamed during installation of the hotfix (for example, 5112wpl.dll) back to their original names.
Restart the Clearswift Web Proxy Engine service.

Back to Contents

Files included in this hotfix

The table below shows the files contained in this hotfix, and their current version numbers.

MIMEsweeper for Web program file	New version
`fml15.dll`	1.5.6
`http.dll`	5.1.15
`wpl.dll`	5.1.15

Back to Contents

Revision 1.0 July 2006
Published by Clearswift Ltd.
© 1995-2006 Clearswift Ltd.
All rights reserved

The materials contained herein are the sole property of Clearswift Ltd. No part of this publication may be reproduced or disseminated or transmitted in any form or by any means electronic, mechanical, photocopying, recording, or otherwise stored in any retrievable system or otherwise used in any manner whatsoever, in part or in whole, without the express permission of Clearswift Ltd.

Information in this document may contain references to fictional persons, companies, products and events for illustrative purposes. Any similarities to real persons, companies, products and events are coincidental and Clearswift shall not be liable for any loss suffered as a result of such similarities.

The Clearswift Logo and Clearswift product names including MIMEsweeper^TM, MAILsweeper^TM, e-Sweeper^TM, IMAGEmanager^TM, REMOTEmanager^TM, SECRETsweeper^TM, ENTERPRISEsuite^TM, ClearPoint^TM, ClearSecure^TM, ClearEdge^TM, ClearBase^TM, ClearSurf^TM, DeepSecure^TM, Bastion^TM II, X.400 Filter^TM, FlashPoint^TM, ClearDetect^TM, ClearSupport^TM, ClearLearning^TM, SpamLogic^TM are trademarks or registered trademarks of Clearswift Ltd. All other trademarks are the property of their respective owners. Clearswift Ltd. (registered number 3367495) is registered in Britain with registered offices at 1310 Waterside, Arlington Business Park, Theale, Reading, Berkshire RG7 4SA, England. Users should ensure that they comply with all national legislation regarding the export, import, and use of cryptography.

Clearswift reserves the right to change any part of this document at any time.

U.S. Patent No. 5,623,600