CVE-2007-2873
Last modified
CVE-2007-2873 is a vulnerability of currently unknown severity. SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual configurations using vpopmail or virtual users, allows local users to cause a denial of service (corrupt arbitrary files) via a symlink attack on a file that is used by spamd.. EPSS estimates a 0.34% chance of exploitation in the next 30 days.
Description
SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual configurations using vpopmail or virtual users, allows local users to cause a denial of service (corrupt arbitrary files) via a symlink attack on a file that is used by spamd.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Spamassassin | Spamassassin | 3.1.0 |
| Spamassassin | Spamassassin | 3.1.1 |
| Spamassassin | Spamassassin | 3.1.2 |
| Spamassassin | Spamassassin | 3.1.3 |
| Spamassassin | Spamassassin | 3.1.4 |
| Spamassassin | Spamassassin | 3.1.5 |
| Spamassassin | Spamassassin | 3.1.6 |
| Spamassassin | Spamassassin | 3.1.7 |
| Spamassassin | Spamassassin | 3.1.8 |
| Spamassassin | Spamassassin | 3.1.9 |
| Spamassassin | Spamassassin | 3.2.0 |
| Spamassassin | Spamassassin | 3.2.1 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-2873?
How severe is CVE-2007-2873?
How do I fix CVE-2007-2873?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-2867Multiple vulnerabilities in the layout engine for Mozilla Fi…
- CVE-2007-2868Multiple vulnerabilities in the JavaScript engine for Mozill…
- CVE-2007-2869The form autocomplete feature in Mozilla Firefox 1.5.x befor…
- CVE-2007-2870Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4…
- CVE-2007-2871Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4…
- CVE-2007-2872Multiple integer overflows in the chunk_split function in PH…
- CVE-2007-2874Buffer overflow in the wpa_printf function in the debugging …
- CVE-2007-2875Integer underflow in the cpuset_tasks_read function in the L…
- CVE-2007-2876The sctp_new function in (1) ip_conntrack_proto_sctp.c and (…
- CVE-2007-2877Buffer overflow in tcl/win/tclWinReg.c in Tcl (Tcl/Tk) befor…
- CVE-2007-2878The VFAT compat ioctls in the Linux kernel before 2.6.21.2, …
- CVE-2007-2879Cross-site scripting (XSS) vulnerability in mods.php in GTP …
Are you affected by CVE-2007-2873?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST