Gentoo 200703-02 Normal: SpamAssassin DoS Attack Advisory

Gentoo Linux Security Advisory GLSA 200703-02 https://security.gentoo.org/ Severity: Normal Title: SpamAssassin: Long URI Denial of Service Date: March 02, 2007 Bugs: #166969 ID: 200703-02

Synopsis ======= SpamAssassin is vulnerable to a Denial of Service attack.
Background ========= SpamAssassin is an extensible email filter used to identify junk email.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 mail-filter/spamassassin < 3.1.8 >= 3.1.8
========== SpamAssassin does not correctly handle very long URIs when scanning emails.
Impact ===== An attacker could cause SpamAssassin to consume large amounts of CPU and memory resources by sending one or more emails co...