Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2007-2873

Опубликовано: 11 июн. 2007
Источник: nvd
CVSS2: 1.9
EPSS Низкий

Описание

SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual configurations using vpopmail or virtual users, allows local users to cause a denial of service (corrupt arbitrary files) via a symlink attack on a file that is used by spamd.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:spamassassin:spamassassin:3.1.0:*:*:*:*:*:*:*
cpe:2.3:a:spamassassin:spamassassin:3.1.1:*:*:*:*:*:*:*
cpe:2.3:a:spamassassin:spamassassin:3.1.2:*:*:*:*:*:*:*
cpe:2.3:a:spamassassin:spamassassin:3.1.3:*:*:*:*:*:*:*
cpe:2.3:a:spamassassin:spamassassin:3.1.4:*:*:*:*:*:*:*
cpe:2.3:a:spamassassin:spamassassin:3.1.5:*:*:*:*:*:*:*
cpe:2.3:a:spamassassin:spamassassin:3.1.6:*:*:*:*:*:*:*
cpe:2.3:a:spamassassin:spamassassin:3.1.7:*:*:*:*:*:*:*
cpe:2.3:a:spamassassin:spamassassin:3.1.8:*:*:*:*:*:*:*
cpe:2.3:a:spamassassin:spamassassin:3.1.9:*:*:*:*:*:*:*
cpe:2.3:a:spamassassin:spamassassin:3.2.0:*:*:*:*:*:*:*
cpe:2.3:a:spamassassin:spamassassin:3.2.1:*:*:*:*:*:*:*

EPSS

Процентиль: 20%
0.00062
Низкий

1.9 Low

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

ubuntu
около 18 лет назад

SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual configurations using vpopmail or virtual users, allows local users to cause a denial of service (corrupt arbitrary files) via a symlink attack on a file that is used by spamd.

redhat
около 18 лет назад

SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual configurations using vpopmail or virtual users, allows local users to cause a denial of service (corrupt arbitrary files) via a symlink attack on a file that is used by spamd.

debian
около 18 лет назад

SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as ...

github
около 3 лет назад

SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual configurations using vpopmail or virtual users, allows local users to cause a denial of service (corrupt arbitrary files) via a symlink attack on a file that is used by spamd.

oracle-oval
около 18 лет назад

ELSA-2007-0492: Moderate: spamassassin security update (MODERATE)

EPSS

Процентиль: 20%
0.00062
Низкий

1.9 Low

CVSS2

Дефекты

NVD-CWE-Other