« Volver al listado

CVE-2007-2873

Estado: ModificadaBaja (1.9)—

SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual configurations using vpopmail or virtual users, allows local users to cause a denial of service (corrupt arbitrary files) via a symlink attack on a file that is used by spamd.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Spamassassin — Spamassassin

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-2873",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 1.9,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:M/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.4,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-06-11T23:30:00.000",
  "references": [
    {
      "url": "http://osvdb.org/37234",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://spamassassin.apache.org/advisories/cve-2007-2873.txt",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:125",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0492.html",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/24481",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.securitytracker.com/id?1018242",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/2172",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34864",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://issues.rpath.com/browse/RPL-1450",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10354",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://osvdb.org/37234",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://spamassassin.apache.org/advisories/cve-2007-2873.txt",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:125",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.redhat.com/support/errata/RHSA-2007-0492.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/24481",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1018242",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/2172",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34864",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://issues.rpath.com/browse/RPL-1450",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10354",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual configurations using vpopmail or virtual users, allows local users to cause a denial of service (corrupt arbitrary files) via a symlink attack on a file that is used by spamd."
    },
    {
      "lang": "es",
      "value": "SpamAssassin 3.1.x, 3.2.0, y 3.2.1 anterior a 20070611, cuando funciona como root en configuraciones habituales utilizando usuarios vpopmail o virtuales, permite a usuarios locales provocar denegación de servicio (archivos de su elección corruptos) a través de un ataque de enlace simbólico sobre un fichero que es utlizada por spamd."
    }
  ],
  "lastModified": "2026-06-16T22:40:36.840",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:spamassassin:spamassassin:3.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4F616F8E-1B02-426D-B374-626670FFEE24"
            },
            {
              "criteria": "cpe:2.3:a:spamassassin:spamassassin:3.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E97D6EBA-6DB9-4165-8BBB-17E9F49A6748"
            },
            {
              "criteria": "cpe:2.3:a:spamassassin:spamassassin:3.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4C60F596-D3BA-42F6-BFD0-3A7F469449B0"
            },
            {
              "criteria": "cpe:2.3:a:spamassassin:spamassassin:3.1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "69E3D03E-5578-47AB-ACA7-51D792E36F27"
            },
            {
              "criteria": "cpe:2.3:a:spamassassin:spamassassin:3.1.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7C481915-8F44-4D7F-AFA3-FE1CC4BD876D"
            },
            {
              "criteria": "cpe:2.3:a:spamassassin:spamassassin:3.1.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D2D21D3D-E250-49FE-9075-F2DBA57F5550"
            },
            {
              "criteria": "cpe:2.3:a:spamassassin:spamassassin:3.1.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9F1CF488-8074-4AEA-B7DB-E966E7D23B80"
            },
            {
              "criteria": "cpe:2.3:a:spamassassin:spamassassin:3.1.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F92E7329-EA19-4FE5-AAD0-ACA3E7497766"
            },
            {
              "criteria": "cpe:2.3:a:spamassassin:spamassassin:3.1.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B4F0FD10-EFCA-46BD-ACD9-E04A0F65B5C4"
            },
            {
              "criteria": "cpe:2.3:a:spamassassin:spamassassin:3.1.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FA80E97B-6FD1-4655-9C29-302FA60C6345"
            },
            {
              "criteria": "cpe:2.3:a:spamassassin:spamassassin:3.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EF487853-FE1A-47A8-8E60-8A6D2E0284E1"
            },
            {
              "criteria": "cpe:2.3:a:spamassassin:spamassassin:3.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FCF23DBD-FE7A-4940-8F6C-B13E5DDEFC7F"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}