Fedora Core 5 : spamassassin-3.1.8-1.fc5 (2007-242)

This upgrades to version 3.1.8, which fixes some bugs and CVE-2007-0451 Malformed HTML Denial of Service. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much...

Design/Logic Flaw

Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."...

CVE-2007-0451

Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."...

CVE-2007-0451

Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."...

CVE-2007-0451

Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."...

DEBIAN-CVE-2007-0451

Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."...

CVE-2007-0451

CVE-2007-0451 affects SpamAssassin prior to 3.1.8. The issue arises when processing HTML email containing long URIs, which can trigger excessive memory usage and cause denial of service. Public advisories from Red Hat (RHSA-2007:0074) and Oracle Linux (ELSA-2007-0074) confirm the fix to version 3...

CVE-2007-0451

Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."...

CVE-2007-0451

Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."...

SpamAssassin < 3.1.8 Malformed HTML Long URI DoS

Binary data 3918.prm...

[SECURITY] Fedora Core 5 Update: spamassassin-3.1.8-1.fc5

SpamAssassin provides you with a way to reduce if not completely eliminate Unsolicited Commercial Email SPAM from your incoming email. It can be invoked by a MDA such as sendmail or postfix, or can be called from a procmail script, .forward file, etc. It uses a genetic-algorithm evolved scoring...

[SECURITY] Fedora Core 6 Update: spamassassin-3.1.8-1.fc6

SpamAssassin provides you with a way to reduce if not completely eliminate Unsolicited Commercial Email SPAM from your incoming email. It can be invoked by a MDA such as sendmail or postfix, or can be called from a procmail script, .forward file, etc. It uses a genetic-algorithm evolved scoring...

Fedora Core 5 : spamassassin-3.1.3-1.fc5 (2006-598)

3.1.3 Resolves CVE-2006-2447. Note that you are affected by this bug only if you launched spamd with both --vpopmail and --paranoid, which is not a common configuration. Also included are bug fixes from 3.1.2. Note that Tenable Network Security has extracted the preceding description block direct...

Fedora Core 4 : spamassassin-3.0.6-1.fc4 (2006-658)

Resolves CVE-2006-2447. Note that you are affected by this bug only if you launched spamd with both --vpopmail and --paranoid, which is not a common configuration. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...

Debian DSA-1090-1 : spamassassin - programming error

A vulnerability has been discovered in SpamAssassin, a Perl-based spam filter using text analysis, that can allow remote attackers to execute arbitrary commands. This problem only affects systems where spamd is reachable via the internet and used with vpopmail virtual users, via the '-v' /...

CentOS 4 : spamassassin (CESA-2005:498)

An updated spamassassin package that fixes a denial of service bug when parsing malformed messages is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SpamAssassin provides a way to reduce unsolicited commercial email SPAM from...

CentOS 4 : spamassassin (CESA-2006:0129)

An updated spamassassin package that fixes a denial of service flaw is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SpamAssassin provides a way to reduce unsolicited commercial email SPAM from incoming email. A denial of servi...

CentOS 4 : spamassassin (CESA-2006:0543)

Updated spamassassin packages that fix an arbitrary code execution flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SpamAssassin provides a way to reduce unsolicited commercial email SPAM from incoming email. A flaw was...

Mandrake Linux Security Advisory : spamassassin (MDKSA-2006:103)

A flaw was discovered in the way that spamd processes the virtual POP usernames passed to it. If running with the --vpopmail and --paranoid flags, it is possible for a remote user with the ability to connect to the spamd daemon to execute arbitrary commands as the user running spamd. By default,...

GLSA-200606-09 : SpamAssassin: Execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200606-09 SpamAssassin: Execution of arbitrary code When spamd is run with both the '--vpopmail' -v and '--paranoid' -P options, it is vulnerable to an unspecified issue. Impact : With certain configuration options, a local or eve...