Hello, According to the lastest announce, SpamAssassin from version 3.0.1 to 3.0.3 is subject to a Denial of Service Vulnerability.
This french advisory says it concerns prior versions of 3.0.3. http://www.certa.ssi.gouv.fr/site/CERTA-2005-AVI-225/index.html So is Spamassassin 3.0.0 vulnerable ? My version : $ cat /etc/mandrake-release Mandrakelinux release 10.1 (Official) for i586 $ rpm -q spamassassin spamassassin-3.0.0-1mdk Regards.