Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2006-3215: Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attacke

46
This month
HIGH 7.5UPGRADEUPGRADE

CVE-2006-3215 is a high-severity flaw (CVSS 7.5) affecting mailsweeper for exchange, mailsweeper for smtp. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to bypass the "text analysis", possibly bypassing SPAM and other filters, by sending an e-mail specifying a non-existent or unrecognized character set.

Why this priority

  • High severity

A fixed release or distro patch exists.

Risk facts

CVSS score7.5 (High)
EPSS exploit chance1.7% (top 23%)
CISA exploited listNo
Published2006-06-24
Last modified2026-06-16
Publisher (CNA): MITRE · Vendor: clearswift

Share: LinkedIn · X · Reddit

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

clearswift mailsweeper for exchange UPGRADE
Affected: <= 4.3.19
Fixed in: newer than 4.3.19
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy mailsweeper-for-exchange || rpm -q mailsweeper-for-exchange || mailsweeper-for-exchange --version
2. UPGRADE to newer than 4.3.19 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade mailsweeper-for-exchange
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade mailsweeper-for-exchange
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
clearswift mailsweeper for smtp UPGRADE
Affected: <= 4.3.19
Fixed in: newer than 4.3.19
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy mailsweeper-for-smtp || rpm -q mailsweeper-for-smtp || mailsweeper-for-smtp --version
2. UPGRADE to newer than 4.3.19 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade mailsweeper-for-smtp
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade mailsweeper-for-smtp
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2006-3215?

mailsweeper for exchange: upgrade to newer than 4.3.19; mailsweeper for smtp: upgrade to newer than 4.3.19. Exact commands for each OS are on this page.

Is CVE-2006-3215 being exploited?

CVE-2006-3215 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2006-3215 affect?

CVE-2006-3215 affects mailsweeper for exchange, mailsweeper for smtp. Severity is high (CVSS 7.5). Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to bypass the "text analysis", possibly bypassing SPAM and other filters, by sending an e-mail specifying a non-existent or unr

How urgent is CVE-2006-3215?

Priority 46/100. High severity

Related CVEs

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.