Denial Of Service (DoS)

spamassassin is vulnerable to denial of service. A denial of service bug was found in SpamAssassin. An attacker could construct a message in such a way that would cause SpamAssassin to crash. If a number of these messages are sent, it could lead to a denial of service, potentially preventing the...

openSUSE Security Update : spamassassin (openSUSE-2020-446)

This update for spamassassin fixes the following issues : Security issues fixed : - CVE-2018-11805: Fixed an issue with delimiter handling in rule files related to isregexpvalid bsc1118987. - CVE-2020-1930: Fixed an issue with rule configuration .cf files which can be configured to run system...

openSUSE: Security Advisory for spamassassin (openSUSE-SU-2020:0446-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:0446-1 Security update for spamassassin

This update for spamassassin fixes the following issues: Security issues fixed: - CVE-2018-11805: Fixed an issue with delimiter handling in rule files related to isregexpvalid bsc1118987. - CVE-2020-1930: Fixed an issue with rule configuration .cf files which can be configured to run system...

Security update for spamassassin (important)

openSUSE Security Update: Security update for spamassassin Announcement ID: openSUSE-SU-2020:0446-1 Rating: important References: 1118987 1162197 1162200 862963 Cross-References: CVE-2018-11805 CVE-2020-1930 CVE-2020-1931 Affected Products: openSUSE Leap 15.1 An update that solves three...

SUSE SLES12 Security Update : spamassassin (SUSE-SU-2020:0810-1)

This update for spamassassin fixes the following issues : CVE-2018-11805: Fixed an issue with delimiter handling in rule files related to isregexpvalid bsc1118987. CVE-2020-1930: Fixed an issue with rule configuration .cf files which can be configured to run system commands bsc1162197...

SUSE SLED15 / SLES15 Security Update : spamassassin (SUSE-SU-2020:0811-1)

This update for spamassassin fixes the following issues : Security issues fixed : CVE-2018-11805: Fixed an issue with delimiter handling in rule files related to isregexpvalid bsc1118987. CVE-2020-1930: Fixed an issue with rule configuration .cf files which can be configured to run system command...

SUSE SLES15 Security Update : spamassassin (SUSE-SU-2020:0813-1)

This update for spamassassin fixes the following issues : Security issues fixed : CVE-2018-11805: Fixed an issue with delimiter handling in rule files related to isregexpvalid bsc1118987. CVE-2020-1930: Fixed an issue with rule configuration .cf files which can be configured to run system command...

SUSE-SU-2020:0813-1 Security update for spamassassin

This update for spamassassin fixes the following issues: Security issues fixed: - CVE-2018-11805: Fixed an issue with delimiter handling in rule files related to isregexpvalid bsc1118987. - CVE-2020-1930: Fixed an issue with rule configuration .cf files which can be configured to run system...

SUSE-SU-2020:0811-1 Security update for spamassassin

This update for spamassassin fixes the following issues: Security issues fixed: - CVE-2018-11805: Fixed an issue with delimiter handling in rule files related to isregexpvalid bsc1118987. - CVE-2020-1930: Fixed an issue with rule configuration .cf files which can be configured to run system...

SUSE-SU-2020:0810-1 Security update for spamassassin

This update for spamassassin fixes the following issues: - CVE-2018-11805: Fixed an issue with delimiter handling in rule files related to isregexpvalid bsc1118987. - CVE-2020-1930: Fixed an issue with rule configuration .cf files which can be configured to run system commands bsc1162197. -...

Debian: Security Advisory (DLA-2107-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2107-1 : spamassassin security update

Two vulnerabilities were discovered in spamassassin, a Perl-based spam filter using text analysis. Malicious rule or configuration files, possibly downloaded from an updates server, could execute arbitrary commands under multiple scenarios. For Debian 8 'Jessie', these problems have been fixed in...

[SECURITY] [DLA 2107-1] spamassassin security update

Package : spamassassin Version : 3.4.2-0+deb8u3 CVE ID : CVE-2020-1930 CVE-2020-1931 Debian Bug : 950258 Two vulnerabilities were discovered in spamassassin, a Perl-based spam filter using text analysis. Malicious rule or configuration files, possibly downloaded from an updates server, could...

DLA-2107-1 spamassassin - security update

Bulletin has no description...

The vulnerability of the Apache SpamAssassin spam filtering software lies in its failure to address the neutralization of special elements used in the operating system command line. This allows attackers to execute arbitrary commands on the target system.

The vulnerability of the Apache SpamAssassin spam filtering software exists because measures are not taken to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on the target system by loadi...

CVE-2020-1931

A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious Configuration .cf files can be configured to run system commands similar to CVE-2018-11805. This issue is less stealthy and attempts to exploit the issue will throw warnings. Thanks to Damian...

CVE-2020-1930

A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious rule configuration .cf files can be configured to run system commands similar to CVE-2018-11805. With this bug unpatched, exploits can be injected in a number of scenarios including the same...

[SECURITY] Fedora 31 Update: spamassassin-3.4.4-1.fc31

SpamAssassin provides you with a way to reduce if not completely eliminate Unsolicited Commercial Email SPAM from your incoming email. It can be invoked by a MDA such as sendmail or postfix, or can be called from a procmail script, .forward file, etc. It uses a genetic-algorithm evolved scoring...

[SECURITY] Fedora 30 Update: spamassassin-3.4.4-1.fc30

SpamAssassin provides you with a way to reduce if not completely eliminate Unsolicited Commercial Email SPAM from your incoming email. It can be invoked by a MDA such as sendmail or postfix, or can be called from a procmail script, .forward file, etc. It uses a genetic-algorithm evolved scoring...