PT-2006-4111 · Clearswift · Clearswift Mailsweeper For Exchange+1

Published 2006-06-24 · Updated 2017-07-20 · CVE-2006-3216

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Clearswift MAILsweeper for SMTP versions prior to 4.3.20 Clearswift MAILsweeper for Exchange versions prior to 4.3.20

Description The issue allows remote attackers to cause a denial of service. This can be achieved through non-ASCII characters in a reverse DNS lookup result from a Received header, leading to a Receiver service stop. Additionally, it can be caused by unspecified vectors involving malformed messages, resulting in unpredictable behavior that prevents the Security service from processing more messages.

Recommendations For Clearswift MAILsweeper for SMTP versions prior to 4.3.20, update to version 4.3.20 or later. For Clearswift MAILsweeper for Exchange versions prior to 4.3.20, update to version 4.3.20 or later.

Fix

Related Identifiers

CVE-2006-3216

Affected Products

Clearswift Mailsweeper For Exchange

Clearswift Mailsweeper For Smtp

References · 9

• http://securityfocus.com/bid/18584 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-3216 · Security Note
• http://secunia.com/advisories/20756 · Vendor Advisory
• http://osvdb.org/26738 · Note
• http://download.mimesweeper.com/www/TechnicalDocumentation/ReadMe_MSW_4%2C3%2C20.htm · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27303 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27305 · Note
• http://osvdb.org/26739 · Note
• http://vupen.com/english/advisories/2006/2473 · Note