Unscored severity · published Jun 24, 2006
CVE-2006-3216
Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to cause a denial of service via (1) non-ASCII characters in a…
–
CVSS
1.9%
EPSS
No
On KEV
Description
Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to cause a denial of service via (1) non-ASCII characters in a reverse DNS lookup result from a Received header, which leads to a Receiver service stop, and (2) unspecified vectors involving malformed messages, which causes "unpredictable behavior" that prevents the Security service from processing more messages.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MF
Mailsweeper For Exchange · Clearswift
through 4.3.19 · source: NVD
MF
Mailsweeper For Smtp · Clearswift
through 4.3.19 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3216
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3216
download.mimesweeper.com
http://download.mimesweeper.com/www/TechnicalDocumentation/ReadMe_MSW_4%2C3%2C20.htm
Patch
http://secunia.com/advisories/20756
www.osvdb.org
http://www.osvdb.org/26738
www.osvdb.org
http://www.osvdb.org/26739
Patch
http://www.securityfocus.com/bid/18584
www.vupen.com
http://www.vupen.com/english/advisories/2006/2473
More from Mailsweeper For Exchange
–
CVE-2006-3215
Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to bypass the "text analysis", possibly bypassing SPAM and other…