CVE-2007-2873

Published: Jun 11, 2007Modified: Apr 23, 2026

1.9

Vector

AV:L/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 3.4 / Impact: 2.9

Source: NVD

Description

SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual configurations using vpopmail or virtual users, allows local users to cause a denial of service (corrupt arbitrary files) via a symlink attack on a file that is used by spamd.

Affected (12)

Products: Spamassassin: Spamassassin

1 product

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Spamassassin Spamassassin	Version 3.1.0
Spamassassin Spamassassin	Version 3.1.1
Spamassassin Spamassassin	Version 3.1.2
Spamassassin Spamassassin	Version 3.1.3
Spamassassin Spamassassin	Version 3.1.4
Spamassassin Spamassassin	Version 3.1.5
Spamassassin Spamassassin	Version 3.1.6
Spamassassin Spamassassin	Version 3.1.7
Spamassassin Spamassassin	Version 3.1.8
Spamassassin Spamassassin	Version 3.1.9
Spamassassin Spamassassin	Version 3.2.0
Spamassassin Spamassassin	Version 3.2.1

References (20)

http://osvdb.org/37234

Source: secalert@redhat.com

http://spamassassin.apache.org/advisories/cve-2007-2873.txt

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:125

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0492.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/24481

Source: secalert@redhat.com

http://www.securitytracker.com/id?1018242

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/2172

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/34864

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-1450

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10354

Source: secalert@redhat.com

http://osvdb.org/37234

Source: af854a3a-2127-422b-91ae-364da2661108

http://spamassassin.apache.org/advisories/cve-2007-2873.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2007:125

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2007-0492.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/24481

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1018242

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/2172

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/34864

Source: af854a3a-2127-422b-91ae-364da2661108

https://issues.rpath.com/browse/RPL-1450

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10354

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.