Joined: 13 Jun 2003
Location: Dresden, Germany
|Posted: Mon Aug 09, 2004 7:57 pm Post subject: [ GLSA 200408-06 ] SpamAssassin: Denial of Service vulnerabi
|Gentoo Linux Security Advisory
Title: SpamAssassin: Denial of Service vulnerability (GLSA 200408-06)
Date: August 09, 2004
Updated: May 22, 2006
SpamAssassin is vulnerable to a Denial of Service attack when handling certain malformed messages.
SpamAssassin is an extensible email filter which is used to identify spam.
Vulnerable: <= 2.63-r1
Unaffected: >= 2.64
Architectures: All supported architectures
SpamAssassin contains an unspecified Denial of Service vulnerability.
By sending a specially crafted message an attacker could cause a Denial of Service attack against the SpamAssassin service.
There is no known workaround at this time. All users are encouraged to upgrade to the latest available version of SpamAssassin.
All SpamAssassin users should upgrade to the latest version:
|# emerge sync
# emerge -pv ">=mail-filter/spamassassin-2.64"
# emerge ">=mail-filter/spamassassin-2.64"
SpamAssassin Release Announcement
Last edited by GLSA on Tue May 23, 2006 4:17 am; edited 2 times in total