Description
Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to bypass the "text analysis", possibly bypassing SPAM and other filters, by sending an e-mail specifying a non-existent or unrecognized character set.
References
- 26737 vdb-entry
- http://download.mimesweeper.com/www/TechnicalDocumentation/ReadMe_MSW_4%2C3%2C20.htm
- 18584 vdb-entry
- mailsweeper-charcter-set-security-bypass(27301) vdb-entry
- 20756 third-party-advisory
- ADV-2006-2473 vdb-entry