Red Hat Security AdvisoryRHSA-2007:0075
spamassassin security update
Released 2007-03-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) spamassassin-3.1.8-2.el5, spamassassin-3.1.8-2.el5.i386, spamassassin-3.1.8-2.el5.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) spamassassin-3.1.8-2.el5, spamassassin-3.1.8-2.el5.i386
Fixes 1 record
Priority LOW 30
Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.06869 · Published 2007-02-16 · Fixed CWE-399
