CVE-2007-2873
- State
- Published
- Severity
- Not scored
- Published
- Jun 11, 2007
- Updated
- Aug 7, 2024
- Reserved
- May 29, 2007
Description
SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual configurations using vpopmail or virtual users, allows local users to cause a denial of service (corrupt arbitrary files) via a symlink attack on a file that is used by spamd.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://issues.rpath.com/browse/RPL-1450
- 1018242vdb-entry
- ADV-2007-2172vdb-entry
- 24481vdb-entry
- http://spamassassin.apache.org/advisories/cve-2007-2873.txt
- oval:org.mitre.oval:def:10354vdb-entrysignature
- MDKSA-2007:125vendor-advisory
- RHSA-2007:0492vendor-advisory
- 37234vdb-entry
- spamassassin-symlink-dos(34864)vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.