CVE-2005-3351: Apache Spamassassin

Medium severity, CVSS 5.0. EPSS: 7.3% chance of exploitation in the next 30 days.

SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients ("To" addresses), which triggers a bus error in Perl.

Affected products

• Apache Spamassassin: version 3.0.4 only

Published 2005-11-20. Last modified 2026-06-16.