Vulnerability-Lookup

CVE-2007-0451 (GCVE-0-2007-0451)

Vulnerability from cvelistv5 – Published: 2007-02-16 19:00 – Updated: 2024-08-07 12:19

Summary

Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root Scorecard

References

23 references

URL	Tags
http://spamassassin.apache.org/advisories/cve-200…	x_refsource_CONFIRM
http://secunia.com/advisories/24200	third-party-advisoryx_refsource_SECUNIA
https://issues.rpath.com/browse/RPL-1073	x_refsource_CONFIRM
http://secunia.com/advisories/24889	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/24265	third-party-advisoryx_refsource_SECUNIA
http://fedoranews.org/cms/node/2659	vendor-advisoryx_refsource_FEDORA
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://fedoranews.org/cms/node/2657	vendor-advisoryx_refsource_FEDORA
http://www.vupen.com/english/advisories/2007/0628	vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/bid/22584	vdb-entryx_refsource_BID
http://secunia.com/advisories/24250	third-party-advisoryx_refsource_SECUNIA
http://www.securitytracker.com/id?1017666	vdb-entryx_refsource_SECTRACK
http://rhn.redhat.com/errata/RHSA-2007-0074.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/24256	third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://osvdb.org/33207	vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/24197	third-party-advisoryx_refsource_SECUNIA
http://svn.apache.org/repos/asf/spamassassin/bran…	x_refsource_CONFIRM
http://secunia.com/advisories/24307	third-party-advisoryx_refsource_SECUNIA
http://security.gentoo.org/glsa/glsa-200703-02.xml	vendor-advisoryx_refsource_GENTOO
http://www.redhat.com/support/errata/RHSA-2007-00…	vendor-advisoryx_refsource_REDHAT

Date Public

2007-02-16 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T12:19:30.321Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://spamassassin.apache.org/advisories/cve-2007-0451.txt"
          },
          {
            "name": "24200",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24200"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-1073"
          },
          {
            "name": "24889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24889"
          },
          {
            "name": "MDKSA-2007:049",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:049"
          },
          {
            "name": "24265",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24265"
          },
          {
            "name": "FEDORA-2007-241",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://fedoranews.org/cms/node/2659"
          },
          {
            "name": "SUSE-SR:2007:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_6_sr.html"
          },
          {
            "name": "oval:org.mitre.oval:def:10018",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10018"
          },
          {
            "name": "FEDORA-2007-242",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://fedoranews.org/cms/node/2657"
          },
          {
            "name": "ADV-2007-0628",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/0628"
          },
          {
            "name": "22584",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/22584"
          },
          {
            "name": "24250",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24250"
          },
          {
            "name": "1017666",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1017666"
          },
          {
            "name": "RHSA-2007:0074",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2007-0074.html"
          },
          {
            "name": "24256",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24256"
          },
          {
            "name": "spamassassin-url-dos(32536)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32536"
          },
          {
            "name": "33207",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/33207"
          },
          {
            "name": "24197",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24197"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://svn.apache.org/repos/asf/spamassassin/branches/3.1/build/announcements/3.1.8.txt"
          },
          {
            "name": "24307",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24307"
          },
          {
            "name": "GLSA-200703-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200703-02.xml"
          },
          {
            "name": "RHSA-2007:0075",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0075.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-02-16T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers \"massive memory usage.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://spamassassin.apache.org/advisories/cve-2007-0451.txt"
        },
        {
          "name": "24200",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24200"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-1073"
        },
        {
          "name": "24889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24889"
        },
        {
          "name": "MDKSA-2007:049",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:049"
        },
        {
          "name": "24265",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24265"
        },
        {
          "name": "FEDORA-2007-241",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://fedoranews.org/cms/node/2659"
        },
        {
          "name": "SUSE-SR:2007:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_6_sr.html"
        },
        {
          "name": "oval:org.mitre.oval:def:10018",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10018"
        },
        {
          "name": "FEDORA-2007-242",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://fedoranews.org/cms/node/2657"
        },
        {
          "name": "ADV-2007-0628",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/0628"
        },
        {
          "name": "22584",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/22584"
        },
        {
          "name": "24250",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24250"
        },
        {
          "name": "1017666",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1017666"
        },
        {
          "name": "RHSA-2007:0074",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2007-0074.html"
        },
        {
          "name": "24256",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24256"
        },
        {
          "name": "spamassassin-url-dos(32536)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32536"
        },
        {
          "name": "33207",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/33207"
        },
        {
          "name": "24197",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24197"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://svn.apache.org/repos/asf/spamassassin/branches/3.1/build/announcements/3.1.8.txt"
        },
        {
          "name": "24307",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24307"
        },
        {
          "name": "GLSA-200703-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200703-02.xml"
        },
        {
          "name": "RHSA-2007:0075",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0075.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2007-0451",
    "datePublished": "2007-02-16T19:00:00.000Z",
    "dateReserved": "2007-01-23T00:00:00.000Z",
    "dateUpdated": "2024-08-07T12:19:30.321Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2007-0451",
      "date": "2026-10-04",
      "epss": "0.06869",
      "percentile": "0.93864"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "product": "n/a",
                "vendor": "n/a",
                "versions": [
                  {
                    "status": "affected",
                    "version": "n/a"
                  }
                ]
              }
            ],
            "source": "secalert@redhat.com"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:apache:spamassassin:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "220BF044-C014-428F-A166-799D59E79581",
                    "versionEndIncluding": "3.1.7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:apache:spamassassin:3.0.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C070003F-04FC-428B-9569-F4D33932BF30",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:apache:spamassassin:3.0.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "65BD8410-D228-4851-850F-1045F8CA5C28",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:apache:spamassassin:3.0.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E575B18E-C18F-410B-B271-FF4D892BF4C5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:apache:spamassassin:3.0.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6B57B2CB-C29B-4385-ABA9-59E51A16F5FB",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:apache:spamassassin:3.1.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3ED86528-F90B-45FA-B21F-8D572C77A4F5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:apache:spamassassin:3.1.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "70CC8292-C195-4966-B980-FF0D9A10053D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:apache:spamassassin:3.1.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "547BE8A6-DAF3-40CE-BCD0-692250F9121B",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers \"massive memory usage.\""
          },
          {
            "lang": "es",
            "value": "Apache SpamAssassin versiones anteriores a 3.1.8, permite a atacantes remotos causar una denegaci\u00f3n de servicio por medio de URLs largas en HTML malformado, que desencadena un \"massive memory usage\u201d"
          }
        ],
        "evaluatorSolution": "Upgrade to SpamAssassin version 3.1.8",
        "id": "CVE-2007-0451",
        "lastModified": "2026-06-16T22:35:35.647",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "MEDIUM",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 4.3,
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 8.6,
              "impactScore": 2.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": true
            }
          ]
        },
        "published": "2007-02-16T19:28:00.000",
        "references": [
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Patch"
            ],
            "url": "http://fedoranews.org/cms/node/2657"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Patch"
            ],
            "url": "http://fedoranews.org/cms/node/2659"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://osvdb.org/33207"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://rhn.redhat.com/errata/RHSA-2007-0074.html"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24197"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24200"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24250"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24256"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24265"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24307"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24889"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://security.gentoo.org/glsa/glsa-200703-02.xml"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://spamassassin.apache.org/advisories/cve-2007-0451.txt"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://svn.apache.org/repos/asf/spamassassin/branches/3.1/build/announcements/3.1.8.txt"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:049"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.novell.com/linux/security/advisories/2007_6_sr.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0075.html"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Patch"
            ],
            "url": "http://www.securityfocus.com/bid/22584"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.securitytracker.com/id?1017666"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/0628"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32536"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://issues.rpath.com/browse/RPL-1073"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10018"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "http://fedoranews.org/cms/node/2657"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "http://fedoranews.org/cms/node/2659"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://osvdb.org/33207"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://rhn.redhat.com/errata/RHSA-2007-0074.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24197"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24200"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24250"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24256"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24265"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24307"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/24889"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://security.gentoo.org/glsa/glsa-200703-02.xml"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://spamassassin.apache.org/advisories/cve-2007-0451.txt"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://svn.apache.org/repos/asf/spamassassin/branches/3.1/build/announcements/3.1.8.txt"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:049"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.novell.com/linux/security/advisories/2007_6_sr.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0075.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "http://www.securityfocus.com/bid/22584"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securitytracker.com/id?1017666"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/0628"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32536"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://issues.rpath.com/browse/RPL-1073"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10018"
          }
        ],
        "sourceIdentifier": "secalert@redhat.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-399"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Important",
      "current_release_date": "2025-11-21T13:20:41+00:00",
      "cve": "CVE-2007-0451",
      "id": "CVE-2007-0451",
      "initial_release_date": "2007-02-13T00:00:00+00:00",
      "product_status:fixed": "74",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "security flaw",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2007/cve-2007-0451.json",
      "version": "3"
    }
  }
}

CERTA-2007-AVI-094

Vulnerability from certfr_avis - Published: 2007-02-16 - Updated: 2007-03-13

Une vulnérabilité présente dans SpamAssassin permet de réaliser un déni de service.

Description

Une vulnérabilité dans le traitement des adresses réticulaires présentes à l'intérieur des messages permet à un utilisateur distant de réaliser un déni de service par le biais d'un message spécialement conçu.

Solution

La version 3.1.8 de SpamAssassin corrige le problème.

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	SpamAssassin	SpamAssassin	SpamAssassin versions 3.1.x.

References

Title

Publication Time

EUVD-2026-132503

European Vulnerability Database identifier assigned by ENISA

Reserved

2026-10-02 06:34

Assigner

ENISA

Alias of

a CVE record, shown under related vulnerabilities. This identifier carries no description, severity or references of its own: they belong to that CVE.

JSON

To clipboard

{
  "assigner": "ENISA",
  "date_reserved": "2026-10-02T06:34:07.843668+00:00",
  "id": "EUVD-2026-132503"
}

FKIE_CVE-2007-0451

Vulnerability from fkie_nvd - Published: 2007-02-16 19:28 - Updated: 2026-06-16 22:35

Severity

Summary

Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."

References

URL	Tags
secalert@redhat.com	http://fedoranews.org/cms/node/2657	Patch
secalert@redhat.com	http://fedoranews.org/cms/node/2659	Patch
secalert@redhat.com	http://osvdb.org/33207
secalert@redhat.com	http://rhn.redhat.com/errata/RHSA-2007-0074.html
secalert@redhat.com	http://secunia.com/advisories/24197	Vendor Advisory
secalert@redhat.com	http://secunia.com/advisories/24200	Vendor Advisory
secalert@redhat.com	http://secunia.com/advisories/24250	Vendor Advisory
secalert@redhat.com	http://secunia.com/advisories/24256	Vendor Advisory
secalert@redhat.com	http://secunia.com/advisories/24265	Vendor Advisory
secalert@redhat.com	http://secunia.com/advisories/24307	Vendor Advisory
secalert@redhat.com	http://secunia.com/advisories/24889	Vendor Advisory
secalert@redhat.com	http://security.gentoo.org/glsa/glsa-200703-02.xml
secalert@redhat.com	http://spamassassin.apache.org/advisories/cve-2007-0451.txt
secalert@redhat.com	http://svn.apache.org/repos/asf/spamassassin/branches/3.1/build/announcements/3.1.8.txt
secalert@redhat.com	http://www.mandriva.com/security/advisories?name=MDKSA-2007:049
secalert@redhat.com	http://www.novell.com/linux/security/advisories/2007_6_sr.html
secalert@redhat.com	http://www.redhat.com/support/errata/RHSA-2007-0075.html
secalert@redhat.com	http://www.securityfocus.com/bid/22584	Patch
secalert@redhat.com	http://www.securitytracker.com/id?1017666
secalert@redhat.com	http://www.vupen.com/english/advisories/2007/0628	Vendor Advisory
secalert@redhat.com	https://exchange.xforce.ibmcloud.com/vulnerabilities/32536
secalert@redhat.com	https://issues.rpath.com/browse/RPL-1073
secalert@redhat.com	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10018
af854a3a-2127-422b-91ae-364da2661108	http://fedoranews.org/cms/node/2657	Patch
af854a3a-2127-422b-91ae-364da2661108	http://fedoranews.org/cms/node/2659	Patch
af854a3a-2127-422b-91ae-364da2661108	http://osvdb.org/33207
af854a3a-2127-422b-91ae-364da2661108	http://rhn.redhat.com/errata/RHSA-2007-0074.html
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/24197	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/24200	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/24250	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/24256	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/24265	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/24307	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/24889	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://security.gentoo.org/glsa/glsa-200703-02.xml
af854a3a-2127-422b-91ae-364da2661108	http://spamassassin.apache.org/advisories/cve-2007-0451.txt
af854a3a-2127-422b-91ae-364da2661108	http://svn.apache.org/repos/asf/spamassassin/branches/3.1/build/announcements/3.1.8.txt
af854a3a-2127-422b-91ae-364da2661108	http://www.mandriva.com/security/advisories?name=MDKSA-2007:049
af854a3a-2127-422b-91ae-364da2661108	http://www.novell.com/linux/security/advisories/2007_6_sr.html
af854a3a-2127-422b-91ae-364da2661108	http://www.redhat.com/support/errata/RHSA-2007-0075.html
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/22584	Patch
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id?1017666
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2007/0628	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/32536
af854a3a-2127-422b-91ae-364da2661108	https://issues.rpath.com/browse/RPL-1073
af854a3a-2127-422b-91ae-364da2661108	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10018

Impacted products

Vendor	Product	Version
apache	spamassassin	*
apache	spamassassin	3.0.1
apache	spamassassin	3.0.2
apache	spamassassin	3.0.3
apache	spamassassin	3.0.4
apache	spamassassin	3.1.0
apache	spamassassin	3.1.1
apache	spamassassin	3.1.2

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "secalert@redhat.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:apache:spamassassin:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "220BF044-C014-428F-A166-799D59E79581",
              "versionEndIncluding": "3.1.7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:spamassassin:3.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "C070003F-04FC-428B-9569-F4D33932BF30",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:spamassassin:3.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "65BD8410-D228-4851-850F-1045F8CA5C28",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:spamassassin:3.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "E575B18E-C18F-410B-B271-FF4D892BF4C5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:spamassassin:3.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "6B57B2CB-C29B-4385-ABA9-59E51A16F5FB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:spamassassin:3.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "3ED86528-F90B-45FA-B21F-8D572C77A4F5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:spamassassin:3.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "70CC8292-C195-4966-B980-FF0D9A10053D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:spamassassin:3.1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "547BE8A6-DAF3-40CE-BCD0-692250F9121B",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers \"massive memory usage.\""
    },
    {
      "lang": "es",
      "value": "Apache SpamAssassin versiones anteriores a 3.1.8, permite a atacantes remotos causar una denegaci\u00f3n de servicio por medio de URLs largas en HTML malformado, que desencadena un \"massive memory usage\u201d"
    }
  ],
  "evaluatorSolution": "Upgrade to SpamAssassin version 3.1.8",
  "id": "CVE-2007-0451",
  "lastModified": "2026-06-16T22:35:35.647",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 4.3,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2007-02-16T19:28:00.000",
  "references": [
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch"
      ],
      "url": "http://fedoranews.org/cms/node/2657"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch"
      ],
      "url": "http://fedoranews.org/cms/node/2659"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://osvdb.org/33207"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://rhn.redhat.com/errata/RHSA-2007-0074.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24197"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24200"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24250"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24256"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24265"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24307"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24889"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://security.gentoo.org/glsa/glsa-200703-02.xml"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://spamassassin.apache.org/advisories/cve-2007-0451.txt"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://svn.apache.org/repos/asf/spamassassin/branches/3.1/build/announcements/3.1.8.txt"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:049"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.novell.com/linux/security/advisories/2007_6_sr.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0075.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/22584"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securitytracker.com/id?1017666"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2007/0628"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32536"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://issues.rpath.com/browse/RPL-1073"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10018"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://fedoranews.org/cms/node/2657"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://fedoranews.org/cms/node/2659"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/33207"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2007-0074.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24197"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24200"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24250"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24256"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24265"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24307"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/24889"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://security.gentoo.org/glsa/glsa-200703-02.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://spamassassin.apache.org/advisories/cve-2007-0451.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://svn.apache.org/repos/asf/spamassassin/branches/3.1/build/announcements/3.1.8.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:049"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.novell.com/linux/security/advisories/2007_6_sr.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0075.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/22584"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1017666"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2007/0628"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32536"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://issues.rpath.com/browse/RPL-1073"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10018"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-Q35M-3HWC-QP9V

Vulnerability from github – Published: 2022-05-01 17:44 – Updated: 2022-05-01 17:44

Details

Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2007-0451"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2007-02-16T19:28:00Z",
    "severity": "MODERATE"
  },
  "details": "Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers \"massive memory usage.\"",
  "id": "GHSA-q35m-3hwc-qp9v",
  "modified": "2022-05-01T17:44:16Z",
  "published": "2022-05-01T17:44:16Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-0451"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32536"
    },
    {
      "type": "WEB",
      "url": "https://issues.rpath.com/browse/RPL-1073"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10018"
    },
    {
      "type": "WEB",
      "url": "http://fedoranews.org/cms/node/2657"
    },
    {
      "type": "WEB",
      "url": "http://fedoranews.org/cms/node/2659"
    },
    {
      "type": "WEB",
      "url": "http://osvdb.org/33207"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2007-0074.html"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24197"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24200"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24250"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24256"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24265"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24307"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/24889"
    },
    {
      "type": "WEB",
      "url": "http://security.gentoo.org/glsa/glsa-200703-02.xml"
    },
    {
      "type": "WEB",
      "url": "http://spamassassin.apache.org/advisories/cve-2007-0451.txt"
    },
    {
      "type": "WEB",
      "url": "http://svn.apache.org/repos/asf/spamassassin/branches/3.1/build/announcements/3.1.8.txt"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:049"
    },
    {
      "type": "WEB",
      "url": "http://www.novell.com/linux/security/advisories/2007_6_sr.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0075.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/22584"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id?1017666"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/0628"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2007-0451

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."

Aliases

CVE-2007-0451

Aliases

CVE-2007-0451

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2007-0451",
    "description": "Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers \"massive memory usage.\"",
    "id": "GSD-2007-0451",
    "references": [
      "https://www.suse.com/security/cve/CVE-2007-0451.html",
      "https://access.redhat.com/errata/RHSA-2007:0075",
      "https://access.redhat.com/errata/RHSA-2007:0074",
      "https://linux.oracle.com/cve/CVE-2007-0451.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2007-0451"
      ],
      "details": "Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers \"massive memory usage.\"",
      "id": "GSD-2007-0451",
      "modified": "2023-12-13T01:21:35.227267Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert@redhat.com",
        "ID": "CVE-2007-0451",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers \"massive memory usage.\""
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://fedoranews.org/cms/node/2657",
            "refsource": "MISC",
            "url": "http://fedoranews.org/cms/node/2657"
          },
          {
            "name": "http://fedoranews.org/cms/node/2659",
            "refsource": "MISC",
            "url": "http://fedoranews.org/cms/node/2659"
          },
          {
            "name": "http://osvdb.org/33207",
            "refsource": "MISC",
            "url": "http://osvdb.org/33207"
          },
          {
            "name": "http://rhn.redhat.com/errata/RHSA-2007-0074.html",
            "refsource": "MISC",
            "url": "http://rhn.redhat.com/errata/RHSA-2007-0074.html"
          },
          {
            "name": "http://secunia.com/advisories/24197",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/24197"
          },
          {
            "name": "http://secunia.com/advisories/24200",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/24200"
          },
          {
            "name": "http://secunia.com/advisories/24250",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/24250"
          },
          {
            "name": "http://secunia.com/advisories/24256",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/24256"
          },
          {
            "name": "http://secunia.com/advisories/24265",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/24265"
          },
          {
            "name": "http://secunia.com/advisories/24307",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/24307"
          },
          {
            "name": "http://secunia.com/advisories/24889",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/24889"
          },
          {
            "name": "http://security.gentoo.org/glsa/glsa-200703-02.xml",
            "refsource": "MISC",
            "url": "http://security.gentoo.org/glsa/glsa-200703-02.xml"
          },
          {
            "name": "http://spamassassin.apache.org/advisories/cve-2007-0451.txt",
            "refsource": "MISC",
            "url": "http://spamassassin.apache.org/advisories/cve-2007-0451.txt"
          },
          {
            "name": "http://svn.apache.org/repos/asf/spamassassin/branches/3.1/build/announcements/3.1.8.txt",
            "refsource": "MISC",
            "url": "http://svn.apache.org/repos/asf/spamassassin/branches/3.1/build/announcements/3.1.8.txt"
          },
          {
            "name": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:049",
            "refsource": "MISC",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:049"
          },
          {
            "name": "http://www.novell.com/linux/security/advisories/2007_6_sr.html",
            "refsource": "MISC",
            "url": "http://www.novell.com/linux/security/advisories/2007_6_sr.html"
          },
          {
            "name": "http://www.redhat.com/support/errata/RHSA-2007-0075.html",
            "refsource": "MISC",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0075.html"
          },
          {
            "name": "http://www.securityfocus.com/bid/22584",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/bid/22584"
          },
          {
            "name": "http://www.securitytracker.com/id?1017666",
            "refsource": "MISC",
            "url": "http://www.securitytracker.com/id?1017666"
          },
          {
            "name": "http://www.vupen.com/english/advisories/2007/0628",
            "refsource": "MISC",
            "url": "http://www.vupen.com/english/advisories/2007/0628"
          },
          {
            "name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32536",
            "refsource": "MISC",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32536"
          },
          {
            "name": "https://issues.rpath.com/browse/RPL-1073",
            "refsource": "MISC",
            "url": "https://issues.rpath.com/browse/RPL-1073"
          },
          {
            "name": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10018",
            "refsource": "MISC",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10018"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:apache:spamassassin:3.0.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:spamassassin:3.0.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:spamassassin:3.0.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:spamassassin:3.0.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:spamassassin:3.1.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:spamassassin:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "3.1.7",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:spamassassin:3.1.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:spamassassin:3.1.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2007-0451"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers \"massive memory usage.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-399"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://svn.apache.org/repos/asf/spamassassin/branches/3.1/build/announcements/3.1.8.txt",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://svn.apache.org/repos/asf/spamassassin/branches/3.1/build/announcements/3.1.8.txt"
            },
            {
              "name": "FEDORA-2007-242",
              "refsource": "FEDORA",
              "tags": [
                "Patch"
              ],
              "url": "http://fedoranews.org/cms/node/2657"
            },
            {
              "name": "FEDORA-2007-241",
              "refsource": "FEDORA",
              "tags": [
                "Patch"
              ],
              "url": "http://fedoranews.org/cms/node/2659"
            },
            {
              "name": "22584",
              "refsource": "BID",
              "tags": [
                "Patch"
              ],
              "url": "http://www.securityfocus.com/bid/22584"
            },
            {
              "name": "24197",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/24197"
            },
            {
              "name": "24200",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/24200"
            },
            {
              "name": "http://spamassassin.apache.org/advisories/cve-2007-0451.txt",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://spamassassin.apache.org/advisories/cve-2007-0451.txt"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-1073",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://issues.rpath.com/browse/RPL-1073"
            },
            {
              "name": "GLSA-200703-02",
              "refsource": "GENTOO",
              "tags": [],
              "url": "http://security.gentoo.org/glsa/glsa-200703-02.xml"
            },
            {
              "name": "MDKSA-2007:049",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:049"
            },
            {
              "name": "RHSA-2007:0074",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2007-0074.html"
            },
            {
              "name": "RHSA-2007:0075",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0075.html"
            },
            {
              "name": "1017666",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://www.securitytracker.com/id?1017666"
            },
            {
              "name": "24250",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/24250"
            },
            {
              "name": "24256",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/24256"
            },
            {
              "name": "24265",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/24265"
            },
            {
              "name": "24307",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/24307"
            },
            {
              "name": "SUSE-SR:2007:006",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://www.novell.com/linux/security/advisories/2007_6_sr.html"
            },
            {
              "name": "24889",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/24889"
            },
            {
              "name": "33207",
              "refsource": "OSVDB",
              "tags": [],
              "url": "http://osvdb.org/33207"
            },
            {
              "name": "ADV-2007-0628",
              "refsource": "VUPEN",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.vupen.com/english/advisories/2007/0628"
            },
            {
              "name": "spamassassin-url-dos(32536)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32536"
            },
            {
              "name": "oval:org.mitre.oval:def:10018",
              "refsource": "OVAL",
              "tags": [],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10018"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": true
        }
      },
      "lastModifiedDate": "2017-10-11T01:31Z",
      "publishedDate": "2007-02-16T19:28Z"
    }
  }
}

OPENSUSE-SU-2024:11395-1

Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2026-09-20 20:17

Summary

perl-Mail-SpamAssassin-3.4.6-71.3 on GA media

Severity

Moderate

Scope

9 vulnerabilities in this advisory, including CVE-2007-0451.

CVE-2007-0451

Recommended: 16 products

Open the full advisory

RHSA-2007:0074

Vulnerability from csaf_redhat - Published: 2007-02-21 18:44 - Updated: 2026-06-25 10:33

Summary

Red Hat Security Advisory: spamassassin security update

Severity

Important

Scope

1 vulnerability in this advisory, including CVE-2007-0451.

CVE-2007-0451

Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."

Fixed: 32 products

https://access.redhat.com/errata/RHSA-2007:0074

Open the full advisory

RHSA-2007:0075

Vulnerability from csaf_redhat - Published: 2007-03-13 23:23 - Updated: 2026-06-25 10:33

Summary

Red Hat Security Advisory: spamassassin security update

Severity

Important

Scope

1 vulnerability in this advisory, including CVE-2007-0451.

CVE-2007-0451

Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, which triggers "massive memory usage."

Fixed: 16 products

https://access.redhat.com/errata/RHSA-2007:0075

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2007-0451 (GCVE-0-2007-0451)

Description

Solution

Tags

Sightings

Nomenclature

Related by attack behaviour