CVE-2006-3216

MEDIUM 5.0CVE-2006-3216 · Published 24/06/2006 · updated 16/06/2026

In short

CVE-2006-3216 is a MEDIUM (CVSS 5.0) vulnerability affecting mailsweeper for exchange (clearswift), mailsweeper for smtp (clearswift).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 79.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mailsweeper for exchange clearswift	`≤ 4.3.19`	No fix yet
mailsweeper for smtp clearswift	`≤ 4.3.19`	No fix yet

Description

Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to cause a denial of service via (1) non-ASCII characters in a reverse DNS lookup result from a Received header, which leads to a Receiver service stop, and (2) unspecified vectors involving malformed messages, which causes "unpredictable behavior" that prevents the Security service from processing more messages.

References

More vulnerabilities in mailsweeper for exchange

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free