Test ID:	1.3.6.1.4.1.25623.1.0.53983
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-736-2)
Summary:	The remote host is missing an update for the Debian 'spamassassin' package(s) announced via the DSA-736-2 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'spamassassin' package(s) announced via the DSA-736-2 advisory. Vulnerability Insight: A vulnerability was recently found in the way that SpamAssassin parses certain email headers. This vulnerability could cause SpamAssassin to consume a large number of CPU cycles when processing messages containing these headers, leading to a potential denial of service (DOS) attack. The version of SpamAssassin in the old stable distribution (woody) is not vulnerable. For the stable distribution (sarge), this problem has been fixed in version 3.0.3-2. Note that packages are not yet ready for certain architectures, these will be released as they become available. For the unstable distribution (sid), this problem has been fixed in version 3.0.4-1. We recommend that you upgrade your sarge or sid spamassassin package. Affected Software/OS: 'spamassassin' package(s) on Debian 3.1. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-1266 13978 http://www.securityfocus.com/bid/13978 DSA-736 http://www.debian.org/security/2005/dsa-736 GLSA-200506-17 http://security.gentoo.org/glsa/glsa-200506-17.xml MDKSA-2005:106 http://www.mandriva.com/security/advisories?name=MDKSA-2005:106 RHSA-2005:498 http://www.redhat.com/support/errata/RHSA-2005-498.html [spamassassin-announce] 20050615 Denial of Service Vulnerability in Apache SpamAssassin 3.0.1-3.0.3 http://mail-archives.apache.org/mod_mbox/spamassassin-announce/200506.mbox/%3c17072.35054.586017.822288%40proton.pathname.com%3e http://bugs.gentoo.org/show_bug.cgi?id=94722 http://www.vuxml.org/freebsd/cc4ce06b-e01c-11d9-a8bd-000cf18bbe54.html oval:org.mitre.oval:def:10901 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10901
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.