CVE-2007-0451

Description

Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."

Affected products

• apache / spamassassin3.1.7
• apache / spamassassin3.0.1 – 3.0.1
• apache / spamassassin3.0.2 – 3.0.2
• apache / spamassassin3.0.3 – 3.0.3
• apache / spamassassin3.0.4 – 3.0.4
• apache / spamassassin3.1.0 – 3.1.0
• apache / spamassassin3.1.1 – 3.1.1
• apache / spamassassin3.1.2 – 3.1.2

References

• VENDOR_ADVISORYhttp://spamassassin.apache.org/advisories/cve-2007-0451.txt
• VENDOR_ADVISORYhttp://secunia.com/advisories/24200
• MISChttps://issues.rpath.com/browse/RPL-1073
• VENDOR_ADVISORYhttp://secunia.com/advisories/24889
• VENDOR_ADVISORYhttp://www.mandriva.com/security/advisories?name=MDKSA-2007:049
• VENDOR_ADVISORYhttp://secunia.com/advisories/24265
• MISChttp://fedoranews.org/cms/node/2659
• VENDOR_ADVISORYhttp://www.novell.com/linux/security/advisories/2007_6_sr.html
• MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10018
• MISChttp://fedoranews.org/cms/node/2657
• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2007/0628
• MISChttp://www.securityfocus.com/bid/22584
• VENDOR_ADVISORYhttp://secunia.com/advisories/24250
• MISChttp://www.securitytracker.com/id?1017666
• MISChttp://rhn.redhat.com/errata/RHSA-2007-0074.html
• VENDOR_ADVISORYhttp://secunia.com/advisories/24256
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/32536
• MISChttp://osvdb.org/33207
• VENDOR_ADVISORYhttp://secunia.com/advisories/24197
• MISChttp://svn.apache.org/repos/asf/spamassassin/branches/3.1/build/announcements/3.1.8.txt
• VENDOR_ADVISORYhttp://secunia.com/advisories/24307
• MISChttp://security.gentoo.org/glsa/glsa-200703-02.xml
• MISChttp://www.redhat.com/support/errata/RHSA-2007-0075.html