Unscored severity · published Jun 24, 2006
CVE-2006-3215
Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to bypass the "text analysis", possibly bypassing SPAM and other…
–
CVSS
1.7%
EPSS
No
On KEV
Description
Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to bypass the "text analysis", possibly bypassing SPAM and other filters, by sending an e-mail specifying a non-existent or unrecognized character set.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MF
Mailsweeper For Exchange · Clearswift
through 4.3.19 · source: NVD
MF
Mailsweeper For Smtp · Clearswift
through 4.3.19 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3215
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3215
download.mimesweeper.com
http://download.mimesweeper.com/www/TechnicalDocumentation/ReadMe_MSW_4%2C3%2C20.htm
Patch
http://secunia.com/advisories/20756
www.osvdb.org
http://www.osvdb.org/26737
Patch
http://www.securityfocus.com/bid/18584
www.vupen.com
http://www.vupen.com/english/advisories/2006/2473
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/27301
More from Mailsweeper For Exchange
–
CVE-2006-3216
Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to cause a denial of service via (1) non-ASCII characters in a…