Spamassassin

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Spamassassin records in CISA KEV

No Spamassassin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Spamassassin 3 records MEDIUM

Records

3 records

TI-2003-01457 CVE-2003-1557 · GHSA-q495-h2r3-cf69

Off-by-one buffer overflow in spamc of SpamAssassin 2.40 through 2.43, when using BSMTP…

MEDIUM 41

Off-by-one buffer overflow in spamc of SpamAssassin 2.40 through 2.43, when using BSMTP mode ("-B"), allows remote attackers to execute arbitrary code via email containing headers with leading "." characters.

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.04564 Published 2008-04-04 No fix listed CWE-119

TI-2004-00734 CVE-2004-0796 · GHSA-w68p-pmm5-233j

SpamAssassin 2.5x, and 2.6x before 2.64, allows remote attackers to cause a denial of…

LOW 27

SpamAssassin 2.5x, and 2.6x before 2.64, allows remote attackers to cause a denial of service via certain malformed messages.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01943 Published 2004-08-24 Fixed

TI-2007-02780 CVE-2007-2873 · GHSA-w3p6-2cc8-h63h

SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual…

LOW 10

SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual configurations using vpopmail or virtual users, allows local users to cause a denial of service (corrupt arbitrary files) via a symlin…

CVSS 2.0LOW 1.9 Local No auth Interaction — EPSS 0.0034 Published 2007-06-11 Fixed

Open these records in search →

Critical	0
High	1
Medium	1
Low	1
No CVSS	0