BID:24481

SpamAssassin Local Symlink Attack And Denial of Service Vulnerability

Info

SpamAssassin Local Symlink Attack And Denial of Service Vulnerability

Bugtraq ID:	24481
Class:	Design Error
CVE:	CVE-2007-2873
Remote:	No
Local:	Yes
Published:	Jun 14 2007 12:00AM
Updated:	Jun 15 2007 04:39PM
Credit:	Martin F. Krafft of Debian reported this vulnerability.
Vulnerable:	SpamAssassin SpamAssassin 3.2 SpamAssassin SpamAssassin 3.1.9 SpamAssassin SpamAssassin 3.1.8 SpamAssassin SpamAssassin 3.1.7 SpamAssassin SpamAssassin 3.1.6 SpamAssassin SpamAssassin 3.1.5 SpamAssassin SpamAssassin 3.1.4 SpamAssassin SpamAssassin 3.1.3 SpamAssassin SpamAssassin 3.1.2 SpamAssassin SpamAssassin 3.1.1 SpamAssassin SpamAssassin 3.1 rPath rPath Linux 1 Redhat Fedora Core6 Redhat Fedora Core5 Redhat Fedora 7 Mandriva Linux Mandrake 2007.1 x86_64 Mandriva Linux Mandrake 2007.1 Mandriva Linux Mandrake 2007.0 x86_64 Mandriva Linux Mandrake 2007.0 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 4.0

Not Vulnerable:	SpamAssassin SpamAssassin 3.2.1

Discussion

SpamAssassin Local Symlink Attack And Denial of Service Vulnerability

SpamAssassin is prone to a remote denial-of-service vulnerability because the application creates files in an insecure manner.

An attacker can exploit this issue to cause a denial-of-service condition.

Versions prior to SpamAssassin 3.2.1 are vulnerable to this issue.

Exploit / POC

SpamAssassin Local Symlink Attack And Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Solution / Fix

SpamAssassin Local Symlink Attack And Denial of Service Vulnerability

Solution:
The vendor has released version 3.2.1 to address this issue; please see the reference section for details.

SpamAssassin SpamAssassin 3.1