CVE-2007-2873

SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual configurations using vpopmail or virtual users, allows local users to cause a denial of service corrupt arbitrary files via a symlink attack on a file that is used by spamd...

CVE-2007-2873

SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual configurations using vpopmail or virtual users, allows local users to cause a denial of service corrupt arbitrary files via a symlink attack on a file that is used by spamd...

CVE-2007-2873

CVE-2007-2873 arises in SpamAssassin 3.1.x, 3.2.0, and 3.2.1 (before 20070611) when SpamAssassin runs as root in unusual configurations using vpopmail or virtual users. A local attacker can exploit a symlink to cause a denial of service by corrupting arbitrary files used by spamd. The available c...

CVE-2007-2873

SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual configurations using vpopmail or virtual users, allows local users to cause a denial of service corrupt arbitrary files via a symlink attack on a file that is used by spamd...

p5-Mail-SpamAssassin -- local user symlink-attack DoS vulnerability

SpamAssassin website reports: A local user symlink-attack DoS vulnerability in SpamAssassin has been found, affecting versions 3.1.x, 3.2.0, and SVN trunk...

RHEL 5 : spamassassin (RHSA-2007:0075)

Updated spamassassin packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. SpamAssassin provides a way to reduce unsolicited commercial email spam from incoming...

security flaw

Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."...

Important: Red Hat Security Advisory: spamassassin security update

Updated spamassassin packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. SpamAssassin provides a way to reduce unsolicited commercial email spam from incoming...

SpamAssassin: Long URI Denial of service

Background SpamAssassin is an extensible email filter used to identify junk email. Description SpamAssassin does not correctly handle very long URIs when scanning emails. Impact An attacker could cause SpamAssassin to consume large amounts of CPU and memory resources by sending one or more emails...

GLSA-200703-02 : SpamAssassin: Long URI Denial of Service

The remote host is affected by the vulnerability described in GLSA-200703-02 SpamAssassin: Long URI Denial of Service SpamAssassin does not correctly handle very long URIs when scanning emails. Impact : An attacker could cause SpamAssassin to consume large amounts of CPU and memory resources by...

CentOS 4 : spamassassin (CESA-2007:0074)

Updated spamassassin packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. SpamAssassin provides a way to reduce unsolicited commercial email spam from incoming...

Mandrake Linux Security Advisory : spamassassin (MDKSA-2007:049)

A bug in the way that SpamAssassin processes HTML emails containing URIs was discovered in versions 3.1.x. A carefully crafted mail message could make SpamAssassin consume significant amounts of CPU resources that could delay or prevent the delivery of mail if a number of these messages were sent...

RHEL 4 : spamassassin (RHSA-2007:0074)

Updated spamassassin packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. SpamAssassin provides a way to reduce unsolicited commercial email spam from incoming...

spamassassin security update

CentOS Errata and Security Advisory CESA-2007:0074 Updated spamassassin packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. SpamAssassin provides a way to reduce...

security flaw

Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."...

Important: Red Hat Security Advisory: spamassassin security update

Updated spamassassin packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. SpamAssassin provides a way to reduce unsolicited commercial email spam from incoming...

Important: spamassassin security update

3.1.8-2 - Fix sa-learn regression 228968 3.1.8-1 - 3.1.8 CVE-2007-0451 3.1.7-9 - silence sa-update cron script 3.1.7-8 - only restart spamd if necessary after sa-update 227756 3.1.7-7 - requires gnupg 227738 3.1.7-6 - explicit requires on perlHTTP::Date and perlLWP::UserAgent Bug 193100 3.1.7-5 -...

SpamAssassin DoS

Oversized URLs in messages lead to DoS conditions...

Fedora Core 6 : spamassassin-3.1.8-1.fc6 (2007-241)

This upgrades to version 3.1.8, which fixes some bugs and CVE-2007-0451 Malformed HTML Denial of Service. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much...

Fedora Core 5 : spamassassin-3.1.8-1.fc5 (2007-242)

This upgrades to version 3.1.8, which fixes some bugs and CVE-2007-0451 Malformed HTML Denial of Service. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much...