3 results (0.003 seconds)

CVSS: 5.5EPSS: 0%CPEs: 12EXPL: 0

CVE-2007-2873 – spamassassin symlink attack

https://notcve.org/view.php?id=CVE-2007-2873

11 Jun 2007 — SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual configurations using vpopmail or virtual users, allows local users to cause a denial of service (corrupt arbitrary files) via a symlink attack on a file that is used by spamd. SpamAssassin 3.1.x, 3.2.0, y 3.2.1 anterior a 20070611, cuando funciona como root en configuraciones habituales utilizando usuarios vpopmail o virtuales, permite a usuarios locales provocar denegación de servicio (archivos de su elección corruptos) a... • http://osvdb.org/37234 •

CVSS: 7.5EPSS: 1%CPEs: 9EXPL: 0

CVE-2004-0796

https://notcve.org/view.php?id=CVE-2004-0796

24 Aug 2004 — SpamAssassin 2.5x, and 2.6x before 2.64, allows remote attackers to cause a denial of service via certain malformed messages. SpamAssasin 2.5x y 2.6x anteriores a 2.64 permiten a atacantes remotos causar una denegación de servicio mediante ciertos mensajes malformados. • http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=129337 •

CVSS: 9.8EPSS: 10%CPEs: 4EXPL: 0

CVE-2003-1557

https://notcve.org/view.php?id=CVE-2003-1557

31 Dec 2003 — Off-by-one buffer overflow in spamc of SpamAssassin 2.40 through 2.43, when using BSMTP mode ("-B"), allows remote attackers to execute arbitrary code via email containing headers with leading "." characters. • http://marc.info/?l=bugtraq&m=104342896818777&w=2 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •