CVE-2004-0796

2004-10-2004:00:00

[email protected]

web.nvd.nist.gov

cve-2004-0796

spamassassin

denial of service

nvd

vulnerability

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.3 Medium

AI Score

Confidence

Low

0.035 Low

EPSS

Percentile

91.6%

JSON

SpamAssassin 2.5x, and 2.6x before 2.64, allows remote attackers to cause a denial of service via certain malformed messages.

Affected configurations

NVD

Node

spamassassinspamassassinMatch2.40

spamassassinspamassassinMatch2.41

spamassassinspamassassinMatch2.42

spamassassinspamassassinMatch2.43

spamassassinspamassassinMatch2.44

spamassassinspamassassinMatch2.50

spamassassinspamassassinMatch2.55

spamassassinspamassassinMatch2.60

spamassassinspamassassinMatch2.63

CPENameOperatorVersion
spamassassin:spamassassinspamassassineq2.40
spamassassin:spamassassinspamassassineq2.41
spamassassin:spamassassinspamassassineq2.42
spamassassin:spamassassinspamassassineq2.43
spamassassin:spamassassinspamassassineq2.44
spamassassin:spamassassinspamassassineq2.50
spamassassin:spamassassinspamassassineq2.55
spamassassin:spamassassinspamassassineq2.60
spamassassin:spamassassinspamassassineq2.63

CPE	Name	Operator	Version
spamassassin:spamassassin	spamassassin	eq	2.40
spamassassin:spamassassin	spamassassin	eq	2.41
spamassassin:spamassassin	spamassassin	eq	2.42
spamassassin:spamassassin	spamassassin	eq	2.43
spamassassin:spamassassin	spamassassin	eq	2.44
spamassassin:spamassassin	spamassassin	eq	2.50
spamassassin:spamassassin	spamassassin	eq	2.55
spamassassin:spamassassin	spamassassin	eq	2.60
spamassassin:spamassassin	spamassassin	eq	2.63