CVE-2007-0451

Опубликовано: 16 фев. 2007

Источник: nvd

CVSS2: 4.3

EPSS Средний

Описание

Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."

Ссылки

http://fedoranews.org/cms/node/2657
Patch
http://fedoranews.org/cms/node/2659
Patch
http://osvdb.org/33207
http://rhn.redhat.com/errata/RHSA-2007-0074.html
http://secunia.com/advisories/24197
Vendor Advisory
http://secunia.com/advisories/24200
Vendor Advisory
http://secunia.com/advisories/24250
Vendor Advisory
http://secunia.com/advisories/24256
Vendor Advisory
http://secunia.com/advisories/24265
Vendor Advisory
http://secunia.com/advisories/24307
Vendor Advisory
http://secunia.com/advisories/24889
Vendor Advisory
http://security.gentoo.org/glsa/glsa-200703-02.xml
http://spamassassin.apache.org/advisories/cve-2007-0451.txt
http://svn.apache.org/repos/asf/spamassassin/branches/3.1/build/announcements/3.1.8.txt
http://www.mandriva.com/security/advisories?name=MDKSA-2007:049
http://www.novell.com/linux/security/advisories/2007_6_sr.html
http://www.redhat.com/support/errata/RHSA-2007-0075.html
http://www.securityfocus.com/bid/22584
Patch
http://www.securitytracker.com/id?1017666
http://www.vupen.com/english/advisories/2007/0628
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apache:spamassassin:*:*:*:*:*:*:*:*

Версия до 3.1.7 (включая)

cpe:2.3:a:apache:spamassassin:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:spamassassin:3.0.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:spamassassin:3.0.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:spamassassin:3.0.4:*:*:*:*:*:*:*

cpe:2.3:a:apache:spamassassin:3.1.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:spamassassin:3.1.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:spamassassin:3.1.2:*:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.2475

Средний

4.3 Medium

CVSS2

Дефекты

CWE-399

Связанные уязвимости

CVE-2007-0451

ubuntu

больше 18 лет назад

Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."

CVE-2007-0451

redhat

больше 18 лет назад

Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."

CVE-2007-0451

debian

больше 18 лет назад

Apache SpamAssassin before 3.1.8 allows remote attackers to cause a de ...

GHSA-q35m-3hwc-qp9v

github

больше 3 лет назад

Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."

EPSS

Процентиль: 96%

0.2475

Средний

4.3 Medium

CVSS2

Дефекты

CWE-399