Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
centosCentOS ProjectCESA-2007:0492
HistoryJun 13, 2007 - 11:34 p.m.

spamassassin security update

2007-06-1323:34:02
CentOS Project
lists.centos.org
39

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

5.3%

JSON

CentOS Errata and Security Advisory CESA-2007:0492

SpamAssassin provides a way to reduce unsolicited commercial email (spam)
from incoming email.

Martin Krafft discovered a symlink issue in SpamAssassin that affects
certain non-default configurations. A local user could use this flaw to
create or overwrite files writable by the spamd process (CVE-2007-2873).

Users of SpamAssassin should upgrade to these updated packages which
contain a backported patch to correct this issue.

Note: This issue did not affect the version of SpamAssassin shipped with
Red Hat Enterprise Linux 3.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2007-June/076091.html
https://lists.centos.org/pipermail/centos-announce/2007-June/076092.html
https://lists.centos.org/pipermail/centos-announce/2007-June/076108.html
https://lists.centos.org/pipermail/centos-announce/2007-June/076119.html
https://lists.centos.org/pipermail/centos-announce/2007-June/076125.html
https://lists.centos.org/pipermail/centos-announce/2007-June/076126.html

Affected packages:
spamassassin

Upstream details at:
https://access.redhat.com/errata/RHSA-2007:0492

Related

openvas 11
nessus 9
ubuntucve 1
cve 1
veracode 1
prion 1
securityvulns 2
oraclelinux 1
fedora 3
redhat 1
debiancve 1
freebsd 1
openvas
openvas
Mandriva Update for spamassassin MDKSA-2007:125 (spamassassin)
2009-04-09 00:00:00
Mandriva Update for spamassassin MDKSA-2007:125 (spamassassin)
2009-04-09 00:00:00
FreeBSD Ports: p5-Mail-SpamAssassin
2008-09-04 00:00:00
nessus
nessus
Fedora 7 : spamassassin-3.2.1-1.fc7 (2007-0390)
2007-11-06 00:00:00
Mandrake Linux Security Advisory : spamassassin (MDKSA-2007:125)
2007-06-18 00:00:00
CentOS 4 / 5 : spamassassin (CESA-2007:0492)
2007-06-18 00:00:00
ubuntucve
ubuntucve
CVE-2007-2873
2007-06-11 00:00:00
cve
cve
CVE-2007-2873
2007-06-11 23:30:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:16:00
prion
prion
Design/Logic Flaw
2007-06-11 23:30:00
securityvulns
securityvulns
[Full-disclosure] rPSA-2007-0119-1 spamassassin
2007-06-14 00:00:00
Spamassasin local DoS
2007-06-14 00:00:00
oraclelinux
oraclelinux
Moderate: spamassassin security update
2007-06-13 00:00:00
fedora
fedora
[SECURITY] Fedora 7 Update: spamassassin-3.2.1-1.fc7
2007-06-12 19:58:31
[SECURITY] Fedora Core 6 Update: spamassassin-3.1.9-1.fc6
2007-06-12 21:18:59
[SECURITY] Fedora Core 5 Update: spamassassin-3.1.9-1.fc5.1
2007-06-12 21:36:03
redhat
redhat
(RHSA-2007:0492) Moderate: spamassassin security update
2007-06-13 00:00:00
debiancve
debiancve
CVE-2007-2873
2007-06-11 23:30:00
freebsd
freebsd
p5-Mail-SpamAssassin -- local user symlink-attack DoS vulnerability
2007-06-11 00:00:00

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

5.3%

JSON
Related for CESA-2007:0492
openvas11nessus9ubuntucve1cve1veracode1prion1securityvulns2oraclelinux1fedora3redhat1debiancve1freebsd1