SpamAssassin: denial of service [LWN.net]

Package(s):

spamassassin

CVE #(s):

CAN-2005-1266

Created:

June 17, 2005

Updated:

July 28, 2005

Description:

SpamAssassin 3.0.4 was released to fix a denial of service vulnerability in versions 3.0.1, 3.0.2, and 3.0.3. The vulnerability allows certain mis-formatted long message headers to cause spam checking to take a very long time.

Alerts:

OpenPKG	OpenPKG-SA-2005.015	2005-07-28
Debian	DSA-736-2	2005-07-07
Gentoo	200506-17:02	2005-06-21
Debian	DSA 736-1	2005-07-01
Mandriva	MDKSA-2005:106	2005-06-28
Red Hat	RHSA-2005:498-01	2005-06-23
SuSE	SUSE-SA:2005:033	2005-06-22
Gentoo	200506-17	2005-06-21
Fedora	FEDORA-2005-428	2005-06-16
Fedora	FEDORA-2005-427	2005-06-16

(Log in to post comments)