CVE-2005-1266 – Debian Linux Security Advisory 736-1

https://notcve.org/view.php?id=CVE-2005-1266

15 Jun 2005 — Apache SpamAssassin 3.0.1, 3.0.2, and 3.0.3 allows remote attackers to cause a denial of service (CPU consumption and slowdown) via a message with a long Content-Type header without any boundaries. A vulnerability was recently found in the way that SpamAssassin parses certain email headers. This vulnerability could cause SpamAssassin to consume a large number of CPU cycles when processing messages containing these headers, leading to a potential denial of service (DOS) attack. • http://bugs.gentoo.org/show_bug.cgi?id=94722 •