CVE-2006-3216
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
24/06/2006
Last modified:
07/11/2023
Description
Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to cause a denial of service via (1) non-ASCII characters in a reverse DNS lookup result from a Received header, which leads to a Receiver service stop, and (2) unspecified vectors involving malformed messages, which causes "unpredictable behavior" that prevents the Security service from processing more messages.
Impact
Base Score 2.0
5.00
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:clearswift:mailsweeper_for_exchange:*:*:*:*:*:*:*:* | 4.3.19 (including) | |
cpe:2.3:a:clearswift:mailsweeper_for_smtp:*:*:*:*:*:*:*:* | 4.3.19 (including) |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://download.mimesweeper.com/www/TechnicalDocumentation/ReadMe_MSW_4%2C3%2C20.htm
- http://secunia.com/advisories/20756
- http://www.osvdb.org/26738
- http://www.osvdb.org/26739
- http://www.securityfocus.com/bid/18584
- http://www.vupen.com/english/advisories/2006/2473
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27303
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27305