OSVDB ID: 11581 Title: SpamAssassin Email Domain Address Saturation DoS |
Info |
|
|
Dates |
||||
|
|
Description |
SpamAssassin contains a flaw that may allow a remote denial of service. The issue is triggered when a specially formatted email is scanned which contains many domain names in the header which causes too many queries for Spamassassin's URIBL function, and will result in loss of availability for the service. |
Classification |
Location:
Remote / Network Access
Attack Type: Denial of Service Impact: Loss of Availability Exploit: Exploit Public Disclosure: Vendor Verified |
Solution |
Upgrade to version 3.0.2 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
|
uni-bremen.de -