PT-2006-4110 · Clearswift · Clearswift Mailsweeper For Exchange+1

Publicado 2006-06-24 · Atualizado 2017-07-20 · CVE-2006-3215

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Clearswift MAILsweeper for SMTP versions prior to 4.3.20 Clearswift MAILsweeper for Exchange versions prior to 4.3.20

Description The issue allows remote attackers to bypass the "text analysis", possibly bypassing SPAM and other filters, by sending an e-mail specifying a non-existent or unrecognized character set.

Recommendations For Clearswift MAILsweeper for SMTP versions prior to 4.3.20, update to version 4.3.20 or later. For Clearswift MAILsweeper for Exchange versions prior to 4.3.20, update to version 4.3.20 or later.

Correção

Identificadores relacionados

CVE-2006-3215

Produtos afetados

Clearswift Mailsweeper For Exchange

Clearswift Mailsweeper For Smtp

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2006-3215 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27301 · Nota
• http://osvdb.org/26737 · Nota
• http://secunia.com/advisories/20756 · Aviso do Fabricante
• http://securityfocus.com/bid/18584 · Correção
• http://download.mimesweeper.com/www/TechnicalDocumentation/ReadMe_MSW_4%2C3%2C20.htm · Nota
• http://vupen.com/english/advisories/2006/2473 · Nota