CVE-2005-1266 - Apache SpamAssassin 3.0.1, 3.0.2, and 3.0.3 allows remote attackers to cause a denial of service (CP

CVE-2005-1266

Summary

Apache SpamAssassin 3.0.1, 3.0.2, and 3.0.3 allows remote attackers to cause a denial of service (CPU consumption and slowdown) via a message with a long Content-Type header without any boundaries.

References

Vulnerable Configurations

cpe:2.3:a:apache:spamassassin:3.0.3:*:*:*:*:*:*:*
cpe:2.3:a:apache:spamassassin:3.0.3:*:*:*:*:*:*:*
cpe:2.3:a:apache:spamassassin:3.0.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:spamassassin:3.0.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:spamassassin:3.0.2:*:*:*:*:*:*:*
cpe:2.3:a:apache:spamassassin:3.0.2:*:*:*:*:*:*:*

CVSS

Base:	5.0 (as of 13-02-2023 - 01:15)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:N/I:N/A:P

oval via4

accepted

2013-04-29T04:09:51.180-04:00

class

vulnerability

contributors

name Aharon Chernin
organization SCAP.com, LLC
name Dragos Prisaca
organization G2, Inc.

definition_extensions

comment The operating system installed on the system is Red Hat Enterprise Linux 4
oval oval:org.mitre.oval:def:11831
comment CentOS Linux 4.x
oval oval:org.mitre.oval:def:16636
comment Oracle Linux 4.x
oval oval:org.mitre.oval:def:15990

description

Apache SpamAssassin 3.0.1, 3.0.2, and 3.0.3 allows remote attackers to cause a denial of service (CPU consumption and slowdown) via a message with a long Content-Type header without any boundaries.

family

unix

oval:org.mitre.oval:def:10901

status

accepted

submitted

2010-07-09T03:56:16-04:00

title

Apache SpamAssassin 3.0.1, 3.0.2, and 3.0.3 allows remote attackers to cause a denial of service (CPU consumption and slowdown) via a message with a long Content-Type header without any boundaries.

version

redhat via4

advisories

rhsa

id	RHSA-2005:498

rpms

spamassassin-0:3.0.4-1.el4
spamassassin-debuginfo-0:3.0.4-1.el4

refmap via4

bid	13978
confirm	http://www.vuxml.org/freebsd/cc4ce06b-e01c-11d9-a8bd-000cf18bbe54.html
debian	DSA-736
gentoo	GLSA-200506-17
mandrake	MDKSA-2005:106
misc	http://bugs.gentoo.org/show_bug.cgi?id=94722
mlist	[spamassassin-announce] 20050615 Denial of Service Vulnerability in Apache SpamAssassin 3.0.1-3.0.3

Last major update

13-02-2023 - 01:15

Published

15-06-2005 - 04:00

Last modified

13-02-2023 - 01:15