Lucene search

K
cve[email protected]CVE-2005-1266
HistoryJun 22, 2005 - 4:00 a.m.

CVE-2005-1266

2005-06-2204:00:00
web.nvd.nist.gov
37
apache
spamassassin
denial of service
dos
cpu consumption
nvd
cve-2005-1266

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

8.9 High

AI Score

Confidence

High

0.214 Low

EPSS

Percentile

96.5%

Apache SpamAssassin 3.0.1, 3.0.2, and 3.0.3 allows remote attackers to cause a denial of service (CPU consumption and slowdown) via a message with a long Content-Type header without any boundaries.

Affected configurations

NVD
Node
apachespamassassinMatch3.0.1
OR
apachespamassassinMatch3.0.2
OR
apachespamassassinMatch3.0.3

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

8.9 High

AI Score

Confidence

High

0.214 Low

EPSS

Percentile

96.5%