FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2005-1266

This CVE name corresponds to:

Entered	Topic
2005-06-18	p5-Mail-SpamAssassin -- denial of service vulnerability

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2005-1266 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2005-1266
Phase	Assigned(20050425)

Description

Apache SpamAssassin 3.0.1, 3.0.2, and 3.0.3 allows remote attackers to cause a denial of service (CPU consumption and slowdown) via a message with a long Content-Type header without any boundaries.

References

Source	Reference
MLIST	[spamassassin-announce] 20050615 Denial of Service Vulnerability in Apache SpamAssassin 3.0.1-3.0.3
CONFIRM	http://www.vuxml.org/freebsd/cc4ce06b-e01c-11d9-a8bd-000cf18bbe54.html
DEBIAN	DSA-736
GENTOO	GLSA-200506-17
MISC	http://bugs.gentoo.org/show_bug.cgi?id=94722
MANDRAKE	MDKSA-2005:106
REDHAT	RHSA-2005:498
BID	13978
OVAL	oval:org.mitre.oval:def:10901