PT-2006-4110 · Clearswift · Clearswift Mailsweeper For Exchange+1

Published 2006-06-24 · Updated 2017-07-20 · CVE-2006-3215

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Clearswift MAILsweeper for SMTP versions prior to 4.3.20 Clearswift MAILsweeper for Exchange versions prior to 4.3.20

Description The issue allows remote attackers to bypass the "text analysis", possibly bypassing SPAM and other filters, by sending an e-mail specifying a non-existent or unrecognized character set.

Recommendations For Clearswift MAILsweeper for SMTP versions prior to 4.3.20, update to version 4.3.20 or later. For Clearswift MAILsweeper for Exchange versions prior to 4.3.20, update to version 4.3.20 or later.

Fix

Related Identifiers

CVE-2006-3215

Affected Products

Clearswift Mailsweeper For Exchange

Clearswift Mailsweeper For Smtp

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2006-3215 · Security Note
• http://secunia.com/advisories/20756 · Vendor Advisory
• http://securityfocus.com/bid/18584 · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27301 · Note
• http://osvdb.org/26737 · Note
• http://download.mimesweeper.com/www/TechnicalDocumentation/ReadMe_MSW_4%2C3%2C20.htm · Note
• http://vupen.com/english/advisories/2006/2473 · Note