Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-2873
HistoryJun 11, 2007 - 12:00 a.m.

CVE-2007-2873

2007-06-1100:00:00
ubuntu.com
ubuntu.com
11

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

5.3%

SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root
in unusual configurations using vpopmail or virtual users, allows local
users to cause a denial of service (corrupt arbitrary files) via a symlink
attack on a file that is used by spamd.

OSVersionArchitecturePackageVersionFilename
ubuntu7.10noarchspamassassin< 3.2.2-0ubuntu1UNKNOWN
ubuntu8.04noarchspamassassin< 3.2.2-0ubuntu1UNKNOWN
ubuntu8.10noarchspamassassin< 3.2.2-0ubuntu1UNKNOWN
ubuntu9.04noarchspamassassin< 3.2.2-0ubuntu1UNKNOWN
ubuntu9.10noarchspamassassin< 3.2.2-0ubuntu1UNKNOWN

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

5.3%