Vulnerability-Lookup

CVE-2005-3351 (GCVE-0-2005-3351)

Vulnerability from cvelistv5 – Published: 2005-11-20 21:00 – Updated: 2024-08-07 23:10

Summary

SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients ("To" addresses), which triggers a bus error in Perl.

Severity

No CVSS data available.

CWE

Assigner

redhat CNA under the redhat root

CNA scorecard B 81/100 over 1011 records in the last 180 days details

References

17 references

URL	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://secunia.com/advisories/17518/	third-party-advisoryx_refsource_SECUNIA
http://issues.apache.org/SpamAssassin/show_bug.cg…	x_refsource_MISC
http://secunia.com/advisories/17666/	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17626/	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/19158	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17386/	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/15373	vdb-entryx_refsource_BID
http://lwn.net/Alerts/159300/	vendor-advisoryx_refsource_FEDORA
http://www.gossamer-threads.com/lists/spamassassi…	mailing-listx_refsource_MLIST
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.redhat.com/support/errata/RHSA-2006-01…	vendor-advisoryx_refsource_REDHAT
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRAKE
http://www.vupen.com/english/advisories/2005/2364	vdb-entryx_refsource_VUPEN
http://osvdb.org/11581	vdb-entryx_refsource_OSVDB
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/17877	third-party-advisoryx_refsource_SECUNIA

Date Public

2005-11-09 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:10:08.354Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "spamassassin-message-recipients-dos(23048)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23048"
          },
          {
            "name": "17518",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17518/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4570"
          },
          {
            "name": "17666",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17666/"
          },
          {
            "name": "17626",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17626/"
          },
          {
            "name": "19158",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19158"
          },
          {
            "name": "17386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17386/"
          },
          {
            "name": "15373",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/15373"
          },
          {
            "name": "FEDORA-2005-1065",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lwn.net/Alerts/159300/"
          },
          {
            "name": "[spamassassin-devel] 20051101 [Bug 4570] Mail with lots of To addresses in header triggers Bus error in Perl [CVE-2005-3351]",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.gossamer-threads.com/lists/spamassassin/devel/62649"
          },
          {
            "name": "oval:org.mitre.oval:def:11125",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11125"
          },
          {
            "name": "RHSA-2006:0129",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0129.html"
          },
          {
            "name": "MDKSA-2005:221",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRAKE",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:221"
          },
          {
            "name": "ADV-2005-2364",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2005/2364"
          },
          {
            "name": "11581",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/11581"
          },
          {
            "name": "SUSE-SR:2005:027",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2005_27_sr.html"
          },
          {
            "name": "17877",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17877"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-11-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients (\"To\" addresses), which triggers a bus error in Perl."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "spamassassin-message-recipients-dos(23048)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23048"
        },
        {
          "name": "17518",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17518/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4570"
        },
        {
          "name": "17666",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17666/"
        },
        {
          "name": "17626",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17626/"
        },
        {
          "name": "19158",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19158"
        },
        {
          "name": "17386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17386/"
        },
        {
          "name": "15373",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/15373"
        },
        {
          "name": "FEDORA-2005-1065",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lwn.net/Alerts/159300/"
        },
        {
          "name": "[spamassassin-devel] 20051101 [Bug 4570] Mail with lots of To addresses in header triggers Bus error in Perl [CVE-2005-3351]",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.gossamer-threads.com/lists/spamassassin/devel/62649"
        },
        {
          "name": "oval:org.mitre.oval:def:11125",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11125"
        },
        {
          "name": "RHSA-2006:0129",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0129.html"
        },
        {
          "name": "MDKSA-2005:221",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRAKE"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:221"
        },
        {
          "name": "ADV-2005-2364",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2005/2364"
        },
        {
          "name": "11581",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/11581"
        },
        {
          "name": "SUSE-SR:2005:027",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2005_27_sr.html"
        },
        {
          "name": "17877",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17877"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2005-3351",
    "datePublished": "2005-11-20T21:00:00.000Z",
    "dateReserved": "2005-10-27T00:00:00.000Z",
    "dateUpdated": "2024-08-07T23:10:08.354Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2005-3351",
      "date": "2026-10-14",
      "epss": "0.07259",
      "percentile": "0.94258"
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:apache:spamassassin:3.0.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6B57B2CB-C29B-4385-ABA9-59E51A16F5FB",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients (\"To\" addresses), which triggers a bus error in Perl."
          }
        ],
        "id": "CVE-2005-3351",
        "lastModified": "2026-04-16T00:27:16.627",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "NONE",
                "baseScore": 5.0,
                "confidentialityImpact": "NONE",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
                "version": "2.0"
              },
              "exploitabilityScore": 10.0,
              "impactScore": 2.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2005-11-20T21:03:00.000",
        "references": [
          {
            "source": "secalert@redhat.com",
            "url": "http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4570"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://lwn.net/Alerts/159300/"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://osvdb.org/11581"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/17386/"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/17518/"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/17626/"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/17666/"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/17877"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/19158"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://www.gossamer-threads.com/lists/spamassassin/devel/62649"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:221"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.novell.com/linux/security/advisories/2005_27_sr.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0129.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.securityfocus.com/bid/15373"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.vupen.com/english/advisories/2005/2364"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23048"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11125"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4570"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://lwn.net/Alerts/159300/"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://osvdb.org/11581"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/17386/"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/17518/"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/17626/"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/17666/"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/17877"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/19158"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://www.gossamer-threads.com/lists/spamassassin/devel/62649"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:221"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.novell.com/linux/security/advisories/2005_27_sr.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0129.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/15373"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.vupen.com/english/advisories/2005/2364"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23048"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11125"
          }
        ],
        "sourceIdentifier": "secalert@redhat.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-Other"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2025-11-21T13:27:37+00:00",
      "cve": "CVE-2005-3351",
      "id": "CVE-2005-3351",
      "initial_release_date": "2005-09-05T00:00:00+00:00",
      "product_status:fixed": "52",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "security flaw",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2005/cve-2005-3351.json",
      "version": "3"
    }
  }
}

CERTA-2005-AVI-457

Vulnerability from certfr_avis - Published: 2005-11-16 - Updated: 2006-03-08

Un utilisateur mal intentionné peut transmettre des messages volontairement mal formés qui vont provoquer un déni de service du processus d'analyse ce qui va empêcher l'identification comme pourriel.

Description

SpamAssassin est un service de filtrage du courrier indésirable, écrit en Perl.

Une expression régulière peu précise du code d'analyse des entêtes peut générer une explosion combinatoire et arrêter le processus en cours. Seul le fils analysant le message courant est impacté, pas l'ensemble du service.

Solution

Mettre à jour en version source 3.1.0 au moins, ou se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Gentoo Linux : la version 3.1.0 est stable pour la plupart des architectures depuis le 14 novembre 2005.

Tout système utilisant SpamAssassin, en version source antérieure à la 3.1.0, pour filtrer les pourriels.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

FKIE_CVE-2005-3351

Vulnerability from fkie_nvd - Published: 2005-11-20 21:03 - Updated: 2026-06-16 22:16

Severity

Summary

SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients ("To" addresses), which triggers a bus error in Perl.

References

URL	Tags
secalert@redhat.com	http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4570
secalert@redhat.com	http://lwn.net/Alerts/159300/	Patch, Vendor Advisory
secalert@redhat.com	http://osvdb.org/11581
secalert@redhat.com	http://secunia.com/advisories/17386/
secalert@redhat.com	http://secunia.com/advisories/17518/
secalert@redhat.com	http://secunia.com/advisories/17626/
secalert@redhat.com	http://secunia.com/advisories/17666/
secalert@redhat.com	http://secunia.com/advisories/17877
secalert@redhat.com	http://secunia.com/advisories/19158
secalert@redhat.com	http://www.gossamer-threads.com/lists/spamassassin/devel/62649	Patch, Vendor Advisory
secalert@redhat.com	http://www.mandriva.com/security/advisories?name=MDKSA-2005:221
secalert@redhat.com	http://www.novell.com/linux/security/advisories/2005_27_sr.html
secalert@redhat.com	http://www.redhat.com/support/errata/RHSA-2006-0129.html
secalert@redhat.com	http://www.securityfocus.com/bid/15373
secalert@redhat.com	http://www.vupen.com/english/advisories/2005/2364
secalert@redhat.com	https://exchange.xforce.ibmcloud.com/vulnerabilities/23048
secalert@redhat.com	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11125
af854a3a-2127-422b-91ae-364da2661108	http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4570
af854a3a-2127-422b-91ae-364da2661108	http://lwn.net/Alerts/159300/	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://osvdb.org/11581
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/17386/
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/17518/
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/17626/
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/17666/
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/17877
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/19158
af854a3a-2127-422b-91ae-364da2661108	http://www.gossamer-threads.com/lists/spamassassin/devel/62649	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.mandriva.com/security/advisories?name=MDKSA-2005:221
af854a3a-2127-422b-91ae-364da2661108	http://www.novell.com/linux/security/advisories/2005_27_sr.html
af854a3a-2127-422b-91ae-364da2661108	http://www.redhat.com/support/errata/RHSA-2006-0129.html
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/15373
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2005/2364
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/23048
af854a3a-2127-422b-91ae-364da2661108	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11125

Impacted products

	Vendor	Product	Version
	apache	spamassassin	3.0.4

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "secalert@redhat.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:apache:spamassassin:3.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "6B57B2CB-C29B-4385-ABA9-59E51A16F5FB",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients (\"To\" addresses), which triggers a bus error in Perl."
    }
  ],
  "id": "CVE-2005-3351",
  "lastModified": "2026-06-16T22:16:46.937",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2005-11-20T21:03:00.000",
  "references": [
    {
      "source": "secalert@redhat.com",
      "url": "http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4570"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://lwn.net/Alerts/159300/"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://osvdb.org/11581"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/17386/"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/17518/"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/17626/"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/17666/"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/17877"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/19158"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.gossamer-threads.com/lists/spamassassin/devel/62649"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:221"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.novell.com/linux/security/advisories/2005_27_sr.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.redhat.com/support/errata/RHSA-2006-0129.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/bid/15373"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.vupen.com/english/advisories/2005/2364"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23048"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11125"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4570"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://lwn.net/Alerts/159300/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/11581"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/17386/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/17518/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/17626/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/17666/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/17877"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/19158"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.gossamer-threads.com/lists/spamassassin/devel/62649"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:221"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.novell.com/linux/security/advisories/2005_27_sr.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2006-0129.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/15373"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2005/2364"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23048"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11125"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-M2FG-Q836-9PMQ

Vulnerability from github – Published: 2022-05-01 02:17 – Updated: 2025-04-03 04:20

Details

SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients ("To" addresses), which triggers a bus error in Perl.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2005-3351"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2005-11-20T21:03:00Z",
    "severity": "MODERATE"
  },
  "details": "SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients (\"To\" addresses), which triggers a bus error in Perl.",
  "id": "GHSA-m2fg-q836-9pmq",
  "modified": "2025-04-03T04:20:08Z",
  "published": "2022-05-01T02:17:09Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2005-3351"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23048"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11125"
    },
    {
      "type": "WEB",
      "url": "http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4570"
    },
    {
      "type": "WEB",
      "url": "http://lwn.net/Alerts/159300"
    },
    {
      "type": "WEB",
      "url": "http://osvdb.org/11581"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/17386"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/17518"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/17626"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/17666"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/17877"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/19158"
    },
    {
      "type": "WEB",
      "url": "http://www.gossamer-threads.com/lists/spamassassin/devel/62649"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:221"
    },
    {
      "type": "WEB",
      "url": "http://www.novell.com/linux/security/advisories/2005_27_sr.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2006-0129.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/15373"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2005/2364"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2005-3351

Vulnerability from gsd - Updated: 2023-12-13 01:20

Details

SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients ("To" addresses), which triggers a bus error in Perl.

Aliases

CVE-2005-3351

Aliases

CVE-2005-3351

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2005-3351",
    "description": "SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients (\"To\" addresses), which triggers a bus error in Perl.",
    "id": "GSD-2005-3351",
    "references": [
      "https://www.suse.com/security/cve/CVE-2005-3351.html",
      "https://access.redhat.com/errata/RHSA-2006:0129"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2005-3351"
      ],
      "details": "SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients (\"To\" addresses), which triggers a bus error in Perl.",
      "id": "GSD-2005-3351",
      "modified": "2023-12-13T01:20:12.894245Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert@redhat.com",
        "ID": "CVE-2005-3351",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients (\"To\" addresses), which triggers a bus error in Perl."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://www.novell.com/linux/security/advisories/2005_27_sr.html",
            "refsource": "MISC",
            "url": "http://www.novell.com/linux/security/advisories/2005_27_sr.html"
          },
          {
            "name": "http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4570",
            "refsource": "MISC",
            "url": "http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4570"
          },
          {
            "name": "http://lwn.net/Alerts/159300/",
            "refsource": "MISC",
            "url": "http://lwn.net/Alerts/159300/"
          },
          {
            "name": "http://osvdb.org/11581",
            "refsource": "MISC",
            "url": "http://osvdb.org/11581"
          },
          {
            "name": "http://secunia.com/advisories/17386/",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/17386/"
          },
          {
            "name": "http://secunia.com/advisories/17518/",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/17518/"
          },
          {
            "name": "http://secunia.com/advisories/17626/",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/17626/"
          },
          {
            "name": "http://secunia.com/advisories/17666/",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/17666/"
          },
          {
            "name": "http://secunia.com/advisories/17877",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/17877"
          },
          {
            "name": "http://secunia.com/advisories/19158",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/19158"
          },
          {
            "name": "http://www.gossamer-threads.com/lists/spamassassin/devel/62649",
            "refsource": "MISC",
            "url": "http://www.gossamer-threads.com/lists/spamassassin/devel/62649"
          },
          {
            "name": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:221",
            "refsource": "MISC",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:221"
          },
          {
            "name": "http://www.redhat.com/support/errata/RHSA-2006-0129.html",
            "refsource": "MISC",
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0129.html"
          },
          {
            "name": "http://www.securityfocus.com/bid/15373",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/bid/15373"
          },
          {
            "name": "http://www.vupen.com/english/advisories/2005/2364",
            "refsource": "MISC",
            "url": "http://www.vupen.com/english/advisories/2005/2364"
          },
          {
            "name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23048",
            "refsource": "MISC",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23048"
          },
          {
            "name": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11125",
            "refsource": "MISC",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11125"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:apache:spamassassin:3.0.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2005-3351"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients (\"To\" addresses), which triggers a bus error in Perl."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[spamassassin-devel] 20051101 [Bug 4570] Mail with lots of To addresses in header triggers Bus error in Perl [CVE-2005-3351]",
              "refsource": "MLIST",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://www.gossamer-threads.com/lists/spamassassin/devel/62649"
            },
            {
              "name": "http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4570",
              "refsource": "MISC",
              "tags": [],
              "url": "http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4570"
            },
            {
              "name": "FEDORA-2005-1065",
              "refsource": "FEDORA",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://lwn.net/Alerts/159300/"
            },
            {
              "name": "15373",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/15373"
            },
            {
              "name": "17877",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/17877"
            },
            {
              "name": "11581",
              "refsource": "OSVDB",
              "tags": [],
              "url": "http://osvdb.org/11581"
            },
            {
              "name": "17386",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/17386/"
            },
            {
              "name": "17518",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/17518/"
            },
            {
              "name": "17626",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/17626/"
            },
            {
              "name": "17666",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/17666/"
            },
            {
              "name": "RHSA-2006:0129",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0129.html"
            },
            {
              "name": "19158",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/19158"
            },
            {
              "name": "SUSE-SR:2005:027",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://www.novell.com/linux/security/advisories/2005_27_sr.html"
            },
            {
              "name": "MDKSA-2005:221",
              "refsource": "MANDRAKE",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:221"
            },
            {
              "name": "ADV-2005-2364",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2005/2364"
            },
            {
              "name": "spamassassin-message-recipients-dos(23048)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23048"
            },
            {
              "name": "oval:org.mitre.oval:def:11125",
              "refsource": "OVAL",
              "tags": [],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11125"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2017-10-11T01:30Z",
      "publishedDate": "2005-11-20T21:03Z"
    }
  }
}

RHSA-2006:0129

Vulnerability from csaf_redhat - Published: 2006-03-07 15:14 - Updated: 2026-06-25 10:32

Summary

Red Hat Security Advisory: spamassassin security update

Severity

Moderate

Scope

1 vulnerability in this advisory, including CVE-2005-3351.

CVE-2005-3351

SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients ("To" addresses), which triggers a bus error in Perl.

Fixed: 32 products

https://access.redhat.com/errata/RHSA-2006:0129

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2005-3351 (GCVE-0-2005-3351)

CERTA-2005-AVI-457

Description

Solution

FKIE_CVE-2005-3351

GHSA-M2FG-Q836-9PMQ

GSD-2005-3351

RHSA-2006:0129

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour