Vulnerability Details CVE-2006-3216
Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to cause a denial of service via (1) non-ASCII characters in a reverse DNS lookup result from a Received header, which leads to a Receiver service stop, and (2) unspecified vectors involving malformed messages, which causes "unpredictable behavior" that prevents the Security service from processing more messages.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.013
EPSS Ranking 78.7%
CVSS Severity
CVSS v2 Score 5.0
References
- http://download.mimesweeper.com/www/TechnicalDocumentation/ReadMe_MSW_4%2C3%2C20.htm
- http://secunia.com/advisories/20756
- http://www.osvdb.org/26738
- http://www.osvdb.org/26739
- http://www.securityfocus.com/bid/18584
- http://www.vupen.com/english/advisories/2006/2473
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27303
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27305
- http://download.mimesweeper.com/www/TechnicalDocumentation/ReadMe_MSW_4%2C3%2C20.htm
- http://secunia.com/advisories/20756
- http://www.osvdb.org/26738
- http://www.osvdb.org/26739
- http://www.securityfocus.com/bid/18584
- http://www.vupen.com/english/advisories/2006/2473
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27303
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27305
Products affected by CVE-2006-3216
-
cpe:2.3:a:clearswift:mailsweeper_for_exchange:*
-
cpe:2.3:a:clearswift:mailsweeper_for_smtp:*