Fedora Update for spamass-milter FEDORA-2010-5176

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for spamass-milter FEDORA-2010-5096

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

DEBIAN-CVE-2010-1132

The mlfienvrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacters in the RCPT TO field of an email message...

CVE-2010-1132

The mlfienvrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacters in the RCPT TO field of an email message...

Design/Logic Flaw

The mlfienvrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacters in the RCPT TO field of an email message...

CVE-2010-1132

The mlfienvrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacters in the RCPT TO field of an email message...

CVE-2010-1132

The mlfienvrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacters in the RCPT TO field of an email message...

CVE-2010-1132

CVE-2010-1132 affects spamass-milter (SpamAssassin Milter Plugin) 0.3.1, where using the -x (expand) option allows remote attackers to craft RCPT TO data that executes arbitrary shell commands on the server. The root cause is unsanitized input during alias expansion via the milter, enabling comma...

Debian DSA-2021-1 : spamass-milter - missing input sanitization

A missing input sanitization in spamass-milter, a milter used to filter mail through spamassassin, was discovered. This allows a remote attacker to inject and execute arbitrary shell commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

DSA-2021-1 spamass-milter - remote command execution

Bulletin has no description...

SpamAssassin Milter Plugin 'mlfi_envrcpt()' Remote Arbitrary Command Injection Vulnerability

SpamAssassin Milter Plugin is prone to a remote command- injection vulnerability because it fails to adequately sanitize user-supplied input data. Remote attackers can exploit this issue to execute arbitrary shell commands with root privileges. SpamAssassin Milter Plugin 0.3.1 is affected; other...

Spamassassin Milter Plugin Remote Root

Spamassassin Milter Plugin Remote Root Zeroday BTW zerodays lurk in the shadows not HERE aka the postfixjoker advisory Logic fuckup? March 07 2010 // if you read this 10 years later you are definetly seeking the nice 0days! Greetz fly out to alex,andi,adize :D +++ KEEP IT ULTRA PRIV8 +++ Software...

Spamassasin milter plugin shell characters vulnerability

Shell characters vulnerability via RCPT TO: command...

Apache SpamAssassin Milter Plugin 0.3.1 - Remote Command Execution

Apache SpamAssassin Milter Plugin 0.3.1 - Remote Command Execution Description: The Spamassassin Milter plugin suffers from a remote root command execution vulnerability. Full exploit details provided. Author: Kingcope Spamassassin Milter Plugin Remote Root Zeroday BTW zerodays lurk in the shadow...

Apache Spamassassin Milter Plugin Command Execution Vulnerability

Exploit for unknown platform in category remote exploits ================================================================= Apache Spamassassin Milter Plugin Command Execution Vulnerability ================================================================= Spamassassin Milter Plugin Remote Root...

SpamAssassin Milter Plugin 'mlfi_envrcpt()' Remote Arbitrary Command Injection

The remote mail server is affected by a command execution vulnerability. Specifically, the 'spamass-milter' plugin does not properly sanitize user-supplied input and can be tricked into executing arbitrary commands on the remote server by default with root privileges. C Tenable Network Security,...

Spamassassin Milter Plugin Remote Root

Spamassassin Milter Plugin Remote Root Zeroday BTW zerodays lurk in the shadows not HERE aka the postfixjoker advisory Logic fuckup? March 07 2010 // if you read this 10 years later you are definetly seeking the nice 0days! Greetz fly out to alex,andi,adize :D +++ KEEP IT ULTRA PRIV8 +++ Software...

spamass-milter -- remote command execution vulnerability

The spamassassin milter plugin contains a vulnerability that can allow remote attackers to execute commands on affected systems. The vulnerability can be exploited trough a special-crafted email header when the plugin was started with the '-x' expand flag...

ClamAV Milter Blackhole-Mode Remote Code Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'ClamAV Milte...

Directory traversal

The Ubuntu clamav-milter.init script in clamav-milter before 0.95.1+dfsg-1ubuntu1.2 in Ubuntu 9.04 sets the ownership of the current working directory to the clamav account, which might allow local users to bypass intended access restrictions via read or write operations involving this directory...