Red Hat Security AdvisoryRHSA-2007:0074
spamassassin security update
Released 2007-02-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 spamassassin-3.1.8-2.el4, spamassassin-3.1.8-2.el4.i386, spamassassin-3.1.8-2.el4.ia64 +1
- Red Hat Enterprise Linux Desktop version 4 spamassassin-3.1.8-2.el4, spamassassin-3.1.8-2.el4.i386
- Red Hat Enterprise Linux ES version 4 spamassassin-3.1.8-2.el4, spamassassin-3.1.8-2.el4.i386, spamassassin-3.1.8-2.el4.ia64
- Red Hat Enterprise Linux WS version 4 spamassassin-3.1.8-2.el4, spamassassin-3.1.8-2.el4.i386, spamassassin-3.1.8-2.el4.ia64
Fixes 1 record
Priority LOW 30
Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.06869 · Published 2007-02-16 · Fixed CWE-399
