Description
Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to cause a denial of service via (1) non-ASCII characters in a reverse DNS lookup result from a Received header, which leads to a Receiver service stop, and (2) unspecified vectors involving malformed messages, which causes "unpredictable behavior" that prevents the Security service from processing more messages.
References
- mailsweeper-malformed-message-dos(27305) vdb-entry
- 26739 vdb-entry
- mailsweeper-reverse-dns-dos(27303) vdb-entry
- http://download.mimesweeper.com/www/TechnicalDocumentation/ReadMe_MSW_4%2C3%2C20.htm
- 18584 vdb-entry
- 20756 third-party-advisory
- 26738 vdb-entry
- ADV-2006-2473 vdb-entry