Vulnerabilities

TI-2003-01457 CVE-2003-1557 · GHSA-q495-h2r3-cf69

Off-by-one buffer overflow in spamc of SpamAssassin 2.40 through 2.43, when using BSMTP…

MEDIUM 41

Off-by-one buffer overflow in spamc of SpamAssassin 2.40 through 2.43, when using BSMTP mode ("-B"), allows remote attackers to execute arbitrary code via email containing headers with leading "." characters.

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.04564 Published 2008-04-04 No fix listed CWE-119

TI-2007-02780 CVE-2007-2873 · GHSA-w3p6-2cc8-h63h

SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual…

LOW 10

SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual configurations using vpopmail or virtual users, allows local users to cause a denial of service (corrupt arbitrary files) via a symlin…

CVSS 2.0LOW 1.9 Local No auth Interaction — EPSS 0.0034 Published 2007-06-11 Fixed

TI-2004-00734 CVE-2004-0796 · GHSA-w68p-pmm5-233j

SpamAssassin 2.5x, and 2.6x before 2.64, allows remote attackers to cause a denial of…

LOW 27

SpamAssassin 2.5x, and 2.6x before 2.64, allows remote attackers to cause a denial of service via certain malformed messages.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01943 Published 2004-08-24 Fixed

Vulnerabilities

Filters

Off-by-one buffer overflow in spamc of SpamAssassin 2.40 through 2.43, when using BSMTP…

SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual…

SpamAssassin 2.5x, and 2.6x before 2.64, allows remote attackers to cause a denial of…