CVE-2006-2447: Undefined Security Weakness

SpamAssassin before 3.1.3, when running with vpopmail and the paranoid -P switch, allows remote attackers to execute arbitrary commands via a crafted message that is not properly handled when invoking spamd with the virtual pop username...

Spamassassin spam filtering engine code execution

Code execution is possible with malformed message if spamd is executed with options -v and -P...

SpamAssassin spamd 3.1.3 - Command Injection (Metasploit)

SpamAssassin spamd 3.1.3 - Command Injection Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

SpamAssassin spamd 3.1.3 - Command Injection (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'SpamAssassin...

FreeBSD : p5-Mail-SpamAssassin -- long message header denial of service (7f3fdef7-51d2-11da-8e93-0010dc4afb40)

A Secunia Advisory reports : A vulnerability has been reported in SpamAssassin, which can be exploited by malicious people to cause a DoS Denial of Service. The vulnerability is caused due to the use of an inefficient regular expression in '/SpamAssassin/Message.pm' to parse email headers. This c...

spamassassin security update

CentOS Errata and Security Advisory CESA-2006:0129 An updated spamassassin package that fixes a denial of service flaw is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SpamAssassin provides a way to reduce unsolicited commercia...

RHEL 4 : spamassassin (RHSA-2006:0129)

An updated spamassassin package that fixes a denial of service flaw is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SpamAssassin provides a way to reduce unsolicited commercial email SPAM from incoming email. A denial of servi...

Moderate: Red Hat Security Advisory: spamassassin security update

An updated spamassassin package that fixes a denial of service flaw is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SpamAssassin provides a way to reduce unsolicited commercial email SPAM from incoming email. A denial of servi...

security flaw

SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients "To" addresses, which triggers a bus error in Perl...

Mandrake Linux Security Advisory : spamassassin (MDKSA-2005:221)

SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients 'To' addresses, which triggers a bus error in Perl. Updated packages have been patched to address this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

CVE-2005-3351

SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients "To" addresses, which triggers a bus error in Perl...

DEBIAN-CVE-2005-3351

SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients "To" addresses, which triggers a bus error in Perl...

CVE-2005-3351

SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients "To" addresses, which triggers a bus error in Perl...

CVE-2005-3351

SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients "To" addresses, which triggers a bus error in Perl...

CVE-2005-3351

CVE-2005-3351 affects SpamAssassin 3.0.4, where an e-mail with an extremely large number of recipients causes a bus error in Perl, bypassing spam detection and potentially impacting mail processing. Public advisories (RH/CentOS/SUSE) describe a denial-of-service risk and direct upgrade to SpamAss...

CVE-2005-3351

SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients "To" addresses, which triggers a bus error in Perl...

CVE-2005-3351

SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients "To" addresses, which triggers a bus error in Perl...

CVE-2005-3351: Undefined Security Weakness

SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients "To" addresses, which triggers a bus error in Perl...

Fedora Core 3 : spamassassin-3.0.4-2.fc3 (2005-1065)

Solves CVE-2005-3351 and a few other minor bugs to improve spam detection accuracy. You could consider this a release candidate for 3.0.5. Also solved is 161785 which ensures that 'service spamassassin restart' should never fail. Note that Tenable Network Security has extracted the preceding...

Fedora Core 4 : spamassassin-3.0.4-2.fc4 (2005-1066)

Solves CVE-2005-3351 and a few other minor bugs to improve spam detection accuracy. You could consider this a release candidate for 3.0.5. Also solved is 161785 which ensures that 'service spamassassin restart' should never fail. Note that Tenable Network Security has extracted the preceding...