840 matches found
Debian Security Advisory DSA 1090-1 (spamassassin)
The remote host is missing an update to spamassassin announced via advisory DSA 1090-1. A vulnerability has been discoverd in SpamAssassin, a Perl-based spam filter using text analysis, that can allow remote attackers to execute arbitrary commands. This problem only affects systems where spamd is...
Debian Security Advisory DSA 736-1 (spamassassin)
The remote host is missing an update to spamassassin announced via advisory DSA 736-1. A vulnerability was recently found in the way that SpamAssassin parses certain email headers. This vulnerability could cause SpamAssassin to consume a large number of CPU cycles when processing messages...
Debian: Security Advisory (DSA-1090-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-736-2)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2007-6341
Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service program "croak" via a crafted DNS response...
CVE-2007-6341
Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service program "croak" via a crafted DNS response...
CVE-2007-6341: Improper Restriction of Operations within the Bounds of a Memory Buffer
Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service program "croak" via a crafted DNS response...
SuSE 10 Security Update : SPAMAssassin (ZYPP Patch Number 3078)
This upgrade brings spamassassin to version 3.1.8 with following changes : - fix for CVE-2007-0451: possible DoS due to incredibly long URIs found in the message content. - disable perl module usage in update channels unless -allowplugins is specified - files with names starting/ending in...
SuSE 10 Security Update : SpamAssassin (ZYPP Patch Number 2521)
Primary it is a version update for the packages spamassassin und perl-spamassasin to version 3.1.7. Furthermore the following bugs were fixed : - SpamAssassin URIDNSBL plugin tries to lookup libraries libimf.so, liblua.so, ... via nameserver - BUG in archive PgSQL.pm SpamAssassin %NASLMINLEVEL...
Fedora 7 : spamassassin-3.2.1-1.fc7 (2007-0390)
Local symlink vulnerability. Fedora is not vulnerable in any default or common configurations. Read upstream's announcement for details. http://spamassassin.apache.org/advisories/CVE-2007-2873.txt Note that Tenable Network Security has extracted the preceding description block directly from the...
openSUSE 10 Security Update : spamassassin (spamassassin-1904)
This update fixes the following security problem in SpamAssassin : - CVE-2006-2447: SpamAssassin when running with vpopmail and the paranoid -P switch, allows remote attackers to execute arbitrary commands via a crafted message that is not properly handled when invoking spamd with the virtual pop...
openSUSE 10 Security Update : spamassassin (spamassassin-2523)
Primary it is a version update for the packages spamassassin und perl-spamassasin to version 3.1.7. Furthermore the following bugs were fixed : - SpamAssassin URIDNSBL plugin tries to lookup libraries libimf.so, liblua.so, ... via nameserver - BUG in archive PgSQL.pm SpamAssassin %NASLMINLEVEL...
openSUSE 10 Security Update : spamassassin (spamassassin-3077)
This upgrade brings spamassassin to version 3.1.8 with following changes : - fix for CVE-2007-0451: possible DoS due to incredibly long URIs found in the message content. - disable perl module usage in update channels unless --allowplugins is specified - files with names starting/ending in...
Code injection
Header.pm in Net::DNS before 0.60, a Perl module, 1 generates predictable sequence IDs with a fixed increment and 2 can use the same starting ID for all child processes of a forking server, which allows remote attackers to spoof DNS responses, as originally reported for qpsmtp and spamassassin...
CVE-2007-3377
Header.pm in Net::DNS before 0.60, a Perl module, 1 generates predictable sequence IDs with a fixed increment and 2 can use the same starting ID for all child processes of a forking server, which allows remote attackers to spoof DNS responses, as originally reported for qpsmtp and spamassassin...
SpamAssassin本地符号链接和拒绝服务漏洞
SpamAssassin是一款功能强大的反垃圾邮件系统。 SpamAssassin存在符号链接和拒绝服务攻击问题，远程攻击者可以利用漏洞使应用程序崩溃，或提升特权。 目前没有详细漏洞细节提供。 SpamAssassin SpamAssassin 3.2 SpamAssassin SpamAssassin 3.1.9 SpamAssassin SpamAssassin 3.1.8 SpamAssassin SpamAssassin 3.1.7 SpamAssassin SpamAssassin 3.1.6 SpamAssassin SpamAssassin 3.1.5 SpamAssass...
Mandrake Linux Security Advisory : spamassassin (MDKSA-2007:125)
SpamAssassin 3.1.x, when running as root with unusual configuration options using vpopmail or virtual users, could allow local users to cause a denial of service via corrupting arbitrary files using a symlink attack on a file used by spamd. SpamAssassin 3.1.9, which corrects this flaw, is provide...
FreeBSD : p5-Mail-SpamAssassin -- local user symlink-attack DoS vulnerability (8092b820-1d6f-11dc-a0b2-001921ab2fa4)
SpamAssassin website reports : A local user symlink-attack DoS vulnerability in SpamAssassin has been found, affecting versions 3.1.x, 3.2.0, and SVN trunk. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD...
CentOS 4 / 5 : spamassassin (CESA-2007:0492)
Updated spamassassin packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SpamAssassin provides a way to reduce unsolicited commercial email spam from incomin...