Emails bouncing with error Win.Exploit.CVE_2019_0903-6966169-0

Emails bouncing with error Win.Exploit.CVE_2019_0903-6966169-0

The recent ClamAV update has caused delivery issues on most of all the cPanel servers world-wide. Emails with or without any attachments get bounced back with an error message that refers to Win.Exploit.CVE_2019_0903-6966169-0. As reported by many users on the internet, this appears to be a false positive. You may ignore this signature by following the instructions below. This applies only to a cPanel server.




cd /usr/local/cpanel/3rdparty/share/clamav
vi whitelist.ign2
Add the signature in a new line: Win.Exploit.CVE_2019_0903-6966169-0
Restart Exim




    • Related Articles

    • Misc Information on emails

      Delete To delete an email address, perform the following steps: Click Delete for the account to remove. Click Delete. To retain the email address, click cancel. Access Webmail This feature allows you to access an email account with a web browser. To ...

    • I receive an error when I upload an excel file to a contact group

      This error might be observed due to one of the following reasons: Special characters or spaces in the mobile numbers column. Please clean the data and try uploading again. If your excel file has additional merge fields (i.e. custom parameters along ...

    • Email & Domain Forwarders

      Overview This interface allows you configure an email address to forward copies of incoming emails to another address. This is useful if, for example, you want to use one email address to check emails addressed to multiple accounts. You can also ...

    • Is it mandatory to digitally authenticate all consents acquired from subscriber? What are the available modes for digital authentication?

      Yes, it is mandatory for Principal Entity(s) to get subscriber's consent digitally authenticated via OTP. However, at inception, the Principal Entities can migrate existing consents for existing entities, processes and data. Migrated consent recorded ...

    • Catch-all

      Overview This interface allows you to set up a default address (catch-all address) that receives any mail for an invalid email address for the domain. You can also define how the default address handles incoming messages. Note: If spammers target ...