PT-2006-4111 · Clearswift · Clearswift Mailsweeper For Exchange+1

Publicado 2006-06-24 · Atualizado 2017-07-20 · CVE-2006-3216

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Clearswift MAILsweeper for SMTP versions prior to 4.3.20 Clearswift MAILsweeper for Exchange versions prior to 4.3.20

Description The issue allows remote attackers to cause a denial of service. This can be achieved through non-ASCII characters in a reverse DNS lookup result from a Received header, leading to a Receiver service stop. Additionally, it can be caused by unspecified vectors involving malformed messages, resulting in unpredictable behavior that prevents the Security service from processing more messages.

Recommendations For Clearswift MAILsweeper for SMTP versions prior to 4.3.20, update to version 4.3.20 or later. For Clearswift MAILsweeper for Exchange versions prior to 4.3.20, update to version 4.3.20 or later.

Correção

Identificadores relacionados

CVE-2006-3216

Produtos afetados

Clearswift Mailsweeper For Exchange

Clearswift Mailsweeper For Smtp

Referências · 9

• http://osvdb.org/26738 · Nota
• http://securityfocus.com/bid/18584 · Correção
• http://download.mimesweeper.com/www/TechnicalDocumentation/ReadMe_MSW_4%2C3%2C20.htm · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27303 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27305 · Nota
• http://osvdb.org/26739 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3216 · Nota de Segurança
• http://secunia.com/advisories/20756 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/2473 · Nota