CVE-2006-3215

critical

Description

Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to bypass the "text analysis", possibly bypassing SPAM and other filters, by sending an e-mail specifying a non-existent or unrecognized character set.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/27301

https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-3212

http://www.vupen.com/english/advisories/2006/2473

http://www.securityfocus.com/bid/18584

http://www.osvdb.org/26737

http://secunia.com/advisories/20756

http://download.mimesweeper.com/www/TechnicalDocumentation/ReadMe_MSW_4%2C3%2C20.htm

Details

Source: Mitre, NVD

Published: 2006-06-24

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.1

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Severity: Critical

EPSS

EPSS: 0.01704