CVE-2005-3351 SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients ("To" addresses), which triggers a bus error in Perl.
MediumCVSS 5.0
EPSS 7.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients ("To" addresses), which triggers a bus error in Perl.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache spamassassin | = 3.0.4 | No fix listed |
| debian/spamassassin(Debian:12) | < 3.1.0a-1 | 3.1.0a-1 |
| debian/spamassassin(Debian:13) | < 3.1.0a-1 | 3.1.0a-1 |
| debian/spamassassin(Debian:14) | < 3.1.0a-1 | 3.1.0a-1 |
References
- issues.apache.org
- FEDORA-2005-1065 patch vendor-advisory
- 11581 vdb-entry
- 17386 third-party-advisory
- 17518 third-party-advisory
- 17626 third-party-advisory
- 17666 third-party-advisory
- 17877 third-party-advisory
- 19158 third-party-advisory
- [spamassassin-devel] 20051101 [Bug 4570] Mail with lots of To addresses in header triggers Bus error in Perl [CVE-2005-3351] mailing-list patch vendor-advisory
- MDKSA-2005:221 vendor-advisory
- SUSE-SR:2005:027 vendor-advisory
- RHSA-2006:0129 vendor-advisory
- 15373 vdb-entry
- ADV-2005-2364 vdb-entry
- spamassassin-message-recipients-dos(23048) vdb-entry
- oval:org.mitre.oval:def:11125 signature vdb-entry
- Debian Security Tracker CVE-2005-3351 vendor-advisory
- bugs.debian.org issue-tracking