• info
• discussion
• exploit
• solution
• references

SpamAssassin Bus Error Spam Detection Bypass Vulnerability

Solution:
A vendor patch is available.

Please see the referenced vendor advisories for further information.


SpamAssassin SpamAssassin 3.0.4

• Mandriva perl-Mail-SpamAssassin-3.0.4-3.2.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva perl-Mail-SpamAssassin-3.0.4-3.2.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva spamassassin-3.0.4-3.2.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva spamassassin-3.0.4-3.2.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva spamassassin-spamc-3.0.4-3.2.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva spamassassin-spamc-3.0.4-3.2.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva spamassassin-spamd-3.0.4-3.2.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva spamassassin-spamd-3.0.4-3.2.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva spamassassin-tools-3.0.4-3.2.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www1.mandrivalinux.com/en/ftp.php3


• Mandriva spamassassin-tools-3.0.4-3.2.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0/X86_64:
  http://www1.mandrivalinux.com/en/ftp.php3


• Trustix perl-mail-spamassassin-3.0.4-2tr.i586.rpm
  Trustix Secure Linux 3.0
  ftp://ftp.trustix.org/pub/trustix/updates/


• Trustix spamassassin-3.0.4-2tr.i586.rpm
  Trustix Secure Linux 3.0
  ftp://ftp.trustix.org/pub/trustix/updates/


• Trustix spamassassin-tools-3.0.4-2tr.i586.rpm
  Trustix Secure Linux 3.0
  ftp://ftp.trustix.org/pub/trustix/updates/