DSA-736-2 spamassassin - mail header parsing error

Bulletin has no description...

CVE-2005-1923

The ENSUREBITS macro in mszipd.c for Clam AntiVirus ClamAV 0.83, and other versions vefore 0.86, allows remote attackers to cause a denial of service CPU consumption by infinite loop via a cabinet CAB file with the cffileFolderOffset field set to 0xff, which causes a zero-length read...

CVE-2005-1923

CVE-2005-1923 affects ClamAV up to 0.85/0.83 (affected: ClamAV 0.83 and other versions before 0.86). The vulnerability is in the ENSURE_BITS macro used in mszipd.c, where a CAB file with cffile_FolderOffset = 0xff can cause a zero-length read, leading to an infinite loop and high CPU usage (remot...

CVE-2002-1906

The CVE-2002-1906 issue affects Polycom ViaVideo web server versions 2.2 and 3.0. The vulnerability is a denial-of-service caused by remote attackers sending incomplete HTTP requests and keeping connections open, which leads to CPU consumption/lockups. The available connected sources (OpenVAS NAS...

CVE-2002-1908

Microsoft IIS 5.0 and 5.1 allows remote attackers to cause a denial of service CPU consumption via an HTTP request with a Host header that contains a large number of "/" forward slash characters...

CVE-2002-1908

CVE-2002-1908 affects Microsoft IIS 5.0 and 5.1. The vulnerability allows remote attackers to trigger high CPU usage leading to a denial of service by sending an HTTP request whose Host header contains a large number of forward-slash characters. The Red Hat and CVE records corroborate the same im...

spamassassin security update

CentOS Errata and Security Advisory CESA-2005:498 An updated spamassassin package that fixes a denial of service bug when parsing malformed messages is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SpamAssassin provides a way t...

CVE-2005-1266

Apache SpamAssassin 3.0.1, 3.0.2, and 3.0.3 allows remote attackers to cause a denial of service CPU consumption and slowdown via a message with a long Content-Type header without any boundaries...

CVE-2005-1266

CVE-2005-1266 affects Apache SpamAssassin 3.0.1–3.0.3, where a remote attacker can trigger a denial of service by sending a message with a long Content-Type header and no boundaries, causing CPU consumption. The issue is documented across multiple advisories and vendors, with Debian Red Hat CentO...

CVE-2001-1490

CVE-2001-1490 affects Mozilla 0.9.6 and enables a remote denial-of-service through a web page containing a large number of images, causing CPU consumption and memory leaks. The connected documents confirm the vulnerable product and the impact but do not provide concrete remediation steps or patch...

CVE-2001-1489

The provided records identify CVE-2001-1489 as an issue in Microsoft Internet Explorer 6 where processing a web page containing a large number of images can lead to a denial of service through CPU consumption and memory leaks. The vulnerability is described consistently across sources (NVD/CVE en...

CVE-2001-1490

Mozilla 0.9.6 allows remote attackers to cause a denial of service CPU consumption and memory leak via a web page with a large number of images...

CVE-2001-1489

Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service CPU consumption and memory leak via a web page with a large number of images...

CVE-2005-1266

Apache SpamAssassin 3.0.1, 3.0.2, and 3.0.3 allows remote attackers to cause a denial of service CPU consumption and slowdown via a message with a long Content-Type header without any boundaries...

CVE-2005-1266

Apache SpamAssassin 3.0.1, 3.0.2, and 3.0.3 allows remote attackers to cause a denial of service CPU consumption and slowdown via a message with a long Content-Type header without any boundaries...

CVE-2005-1807

The Data function in class.smtp.php in PHPMailer 1.7.2 and earlier allows remote attackers to cause a denial of service infinite loop leading to memory and CPU consumption via a long header field...

CVE-2004-2120

Technical details about CVE-2004-2120 are not publicly available in the provided documents. Monitor for updates.

CVE-2005-1522

The imap4d server for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows authenticated remote users to cause a denial of service CPU consumption via a large range value in the FETCH command...

CVE-2005-1522

The imap4d server for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows authenticated remote users to cause a denial of service CPU consumption via a large range value in the FETCH command...

CVE-2005-1522

The imap4d server for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows authenticated remote users to cause a denial of service CPU consumption via a large range value in the FETCH command...