| Package | Affected versions | Patched versions |
|---|---|---|
| spamassassin | = 3.1.0= 3.1.1= 3.1.2= 3.1.3= 3.1.4= 3.1.5= 3.1.6= 3.1.7= 3.1.8= 3.1.9= 3.2.0= 3.2.1 |
SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual configurations using vpopmail or virtual users, allows local users to cause a denial of service (corrupt arbitrary files) via a symlink attack on a file that is used by spamd.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free