Red Hat Security AdvisoryRHSA-2007:0492
spamassassin security update
Released 2007-06-13 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) spamassassin-3.1.9-1.el5, spamassassin-3.1.9-1.el5.i386, spamassassin-3.1.9-1.el5.ia64 +1
- Red Hat Enterprise Linux AS version 4 spamassassin-3.1.9-1.el4, spamassassin-3.1.9-1.el4.i386, spamassassin-3.1.9-1.el4.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) spamassassin-3.1.9-1.el5, spamassassin-3.1.9-1.el5.i386
- Red Hat Enterprise Linux Desktop version 4 spamassassin-3.1.9-1.el4, spamassassin-3.1.9-1.el4.i386
- Red Hat Enterprise Linux ES version 4 spamassassin-3.1.9-1.el4, spamassassin-3.1.9-1.el4.i386, spamassassin-3.1.9-1.el4.ia64
- Red Hat Enterprise Linux WS version 4 spamassassin-3.1.9-1.el4, spamassassin-3.1.9-1.el4.i386, spamassassin-3.1.9-1.el4.ia64
Fixes 1 record
Priority LOW 10
SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual configurations using vpopmail or virtual users, allows local users to cause a denial of service (corrupt arbitrary files) via a symlin…
CVSS 2.0LOW 1.9· Local · No auth · Interaction — · EPSS 0.0034 · Published 2007-06-11 · Fixed
