Detections
Analytics

Mandrake Linux Security Advisory : spamassassin (MDKSA-2007:125)

low Nessus Plugin ID 25537

Synopsis

The remote Mandrake Linux host is missing one or more security updates.

Description

SpamAssassin 3.1.x, when running as root with unusual configuration options using vpopmail or virtual users, could allow local users to cause a denial of service (via corrupting arbitrary files) using a symlink attack on a file used by spamd.

SpamAssassin 3.1.9, which corrects this flaw, is provided with this update.

Solution

Update the affected packages.

See Also

http://spamassassin.apache.org/advisories/CVE-2007-2873.txt

Plugin Details

Severity: Low

ID: 25537

File Name: mandrake_MDKSA-2007-125.nasl

Version: 1.16

Type: local

Published: 6/18/2007

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: Low

Base Score: 1.9

Vector: CVSS2#AV:L/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Information

CPE: p-cpe:/a:mandriva:linux:perl-mail-spamassassin, p-cpe:/a:mandriva:linux:spamassassin, p-cpe:/a:mandriva:linux:spamassassin-spamc, p-cpe:/a:mandriva:linux:spamassassin-spamd, p-cpe:/a:mandriva:linux:spamassassin-tools, cpe:/o:mandriva:linux:2007, cpe:/o:mandriva:linux:2007.1

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/Mandrake/release, Host/Mandrake/rpm-list

Patch Publication Date: 6/14/2007

Reference Information

CVE: CVE-2007-2873

MDKSA: 2007:125