Clearswift MAILsweeper for SMTP / Exchange Multiple Vulnerabilities

Bugtraq ID:	18584
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 21 2006 12:00AM
Updated:	Jun 22 2006 08:25PM
Credit:	The vendor reported these issues.
Vulnerable:	Clearswift MIMEsweeper for Exchange 4.3.19 Clearswift MAILsweeper for SMTP 4.3.19
Not Vulnerable:

Clearswift MAILsweeper for SMTP / Exchange Multiple Vulnerabilities

Clearswift MAILsweeper for SMTP / Exchange is prone to multiple vulnerabilities.

These issues can allow remote attackers to bypass certain security restrictions and carry out denial-of-service attacks.

MAILsweeper for SMTP 4.3.19 and MIMEsweeper for Exchange 4.3.19 are reported prone to these issues; other versions may be affected as well.

Clearswift MAILsweeper for SMTP / Exchange Multiple Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Clearswift MAILsweeper for SMTP / Exchange Multiple Vulnerabilities

Solution:
The vendor has released a patch (4.3.20) to address these issues. Please contact the vendor to obtain fixes.

Clearswift MAILsweeper for SMTP / Exchange Multiple Vulnerabilities

References:

• Home Page (Clearswift)
  
• ReadMe for MAILsweeper for SMTP 4.3.20 (Clearswift)