798 matches found
CLSA-2025-1758728428 spamassassin: Fix of 2 CVEs
CVE-2020-1930: fix command-execution vulnerability in SpamAssassin .cf parsing - CVE-2020-1931: fix command-execution vulnerability in SpamAssassin .cf parsing...
TencentOS Server 3: spamassassin (TSSA-2022:0040)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0040 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
CVE-2019-13612
MDaemon Email Server 19 through 20.0.1 skips SpamAssassin checks by default for e-mail messages larger than 2 MB and limits checks to 10 MB even with special configuration, which is arguably inconsistent with currently popular message sizes. This might interfere with risk management for malicious...
Alibaba Cloud Linux 3 : 0040: spamassassin (ALINUX3-SA-2022:0040)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0040 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2018-11805: In Apache SpamAssassin...
ROS-2-570
2.570 Vulnerability in SpamAssassin spam filtering tool CVE-2020-1946 1. Vulnerability Description: CVE-2020-1946 A vulnerability in the SpamAssassin spam filtering tool, is related to improper input validation when processing rule configuration .cf files. Exploitation of the vulnerability could...
ROS-2-626
2.626 Vulnerability in SpamAssassin spam filtering tool CVE-2020-1946 1. Vulnerability Description: CVE-2020-1946 A vulnerability in the SpamAssassin spam filtering tool, is related to improper input validation when processing rule configuration .cf files. Exploitation of the vulnerability could...
spamassassin bug fix and enhancement update
An update is available for spamassassin. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux...
Linux Distros Unpatched Vulnerability : CVE-2017-15705
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2. The vulnerability arises with certain unclosed tags in emails...
Linux Distros Unpatched Vulnerability : CVE-2018-11781
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax. CVE-2018-11781 Note that Nessus relies on the presence of the package as...
Linux Distros Unpatched Vulnerability : CVE-2020-1946
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Apache SpamAssassin before 3.4.5, malicious rule configuration .cf files can be configured to run system commands without any output or errors. With this,...
Linux Distros Unpatched Vulnerability : CVE-2020-1931
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious Configuration .cf files can be configured to run system...
Linux Distros Unpatched Vulnerability : CVE-2020-1930
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious rule configuration .cf files can be configured to run...
Linux Distros Unpatched Vulnerability : CVE-2018-11805
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Apache SpamAssassin before 3.4.3, nefarious CF files can be configured to run system commands without any output or errors. With this, exploits can be inject...
RHSA-2004:451 Red Hat Security Advisory: spamassassin security update
Bulletin has no description...
RHSA-2021:4315 Red Hat Security Advisory: spamassassin security update
Bulletin has no description...
RHSA-2020:4625 Red Hat Security Advisory: spamassassin security update
Bulletin has no description...
RHSA-2020:3973 Red Hat Security Advisory: spamassassin security update
Bulletin has no description...
RHSA-2018:2916 Red Hat Security Advisory: spamassassin security update
Bulletin has no description...