Description
SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual configurations using vpopmail or virtual users, allows local users to cause a denial of service (corrupt arbitrary files) via a symlink attack on a file that is used by spamd.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | spamassassin | 3.2.1-1 | — |
| Debian 13 | spamassassin | 3.2.1-1 | — |
| Debian 12 | spamassassin | 3.2.1-1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | spamassassin | 3.1.9-1.el5 | RHSA-2007:0492 |
| RHEL 4 | spamassassin | 3.1.9-1.el4 | RHSA-2007:0492 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | spamassassin | 3.4.6-71.3 | openSUSE-SU-2024:11395-1 |
Advisories 2
- RHSA-2007:0492 Red Hat Security Advisory: spamassassin security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- openSUSE-SU-2024:11395-1 perl-Mail-SpamAssassin-3.4.6-71.3 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- https://issues.rpath.com/browse/RPL-1450
- 1018242 vdb-entry
- ADV-2007-2172 vdb-entry
- 24481 vdb-entry
- http://spamassassin.apache.org/advisories/cve-2007-2873.txt
- oval:org.mitre.oval:def:10354 vdb-entry signature
- MDKSA-2007:125 vendor-advisory
- RHSA-2007:0492 vendor-advisory
- 37234 vdb-entry
- spamassassin-symlink-dos(34864) vdb-entry