Denial of Service in SpamAssassin by Perl via Excessive Email Recipients

CVE-2005-3351

Summary

An identified flaw in SpamAssassin 3.0.4 enables attackers to circumvent spam detection mechanisms. By sending an email containing a large number of recipients in the 'To' field, it triggers a bus error in the Perl interpreter. This failure may result in a Denial of Service, effectively disrupting the email processing capabilities of the affected system. Users of this version are advised to apply updates or patches to mitigate potential exploitation.

References