Security Advisory

CVE-2007-2873

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2007-06-11 23:00:00

Last updated 2024-08-07 13:57:54

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual configurations using vpopmail or virtual users, allows local users to cause a denial of service (corrupt arbitrary files) via a symlink attack on a file that is used by spamd.

← Browse all CVEs View on cve.org ↗