CVE-2010-4777

The Perlregnumberedbufffetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions, when running with debugging enabled, allows context-dependent attackers to cause a denial of service assertion failure and application exit via crafted input that is not properly handled when using certain...

CVE-2010-4777

The Perlregnumberedbufffetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions, when running with debugging enabled, allows context-dependent attackers to cause a denial of service assertion failure and application exit via crafted input that is not properly handled when using certain...

Oracle Linux 5 : Moderate: / spamassassin (ELSA-2007-0492)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2007-0492 advisory. 3.1.9-1 - 3.1.9 CVE-2007-2873 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 4 : spamassassin (ELSA-2007-0074)

From Red Hat Security Advisory 2007:0074 : Updated spamassassin packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. SpamAssassin provides a way to reduce...

Scientific Linux Security Update : spamassassin on SL5.x, SL4.x i386/x86_64 (fwd)

Martin Krafft discovered a symlink issue in SpamAssassin that affects certain non-default configurations. A local user could use this flaw to create or overwrite files writable by the spamd process CVE-2007-2873. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C...

SuSE 11.1 Security Update : Perl (SAT Patch Number 4499)

This update fixes a bug in Perl that makes spamassassin crash and does not allow bypassing taint mode by using lc or uc anymore. - CVE-2010-4777: CVSS v2 Base Score: 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P - CVE-2011-1487: CVSS v2 Base Score: 2.6 AV:N/AC:H/Au:N/C:N/I:P/A:N: Permissions, Privileges, and...

Fedora 14 : perl-Mail-Box-2.097-1.fc14 (2011-2541)

Update perl-Mail-Box to 2.097. No longer require spamassassin. 2.097 now randomizes boundary string to avoid undemonstrated security risks with boundary guessing. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable h...

SpamAssassin spamd - Remote Command Execution (Metasploit)

$Id: spamassassinexec.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

DSA-2021-2 spamass-milter - regression fix

Bulletin has no description...

[SECURITY] Fedora 13 Update: spamass-milter-0.3.1-18.fc13

A milter Mail Filter application that pipes incoming mail including thin gs received by rmail/UUCP through SpamAssassin, a highly customizable spam filter. A milter-compatible MTA such as Sendmail or Postfix is required...

[SECURITY] Fedora 11 Update: spamass-milter-0.3.1-18.fc11

A milter Mail Filter application that pipes incoming mail including thin gs received by rmail/UUCP through SpamAssassin, a highly customizable spam filter. A milter-compatible MTA such as Sendmail or Postfix is required...

[SECURITY] Fedora 12 Update: spamass-milter-0.3.1-18.fc12

A milter Mail Filter application that pipes incoming mail including thin gs received by rmail/UUCP through SpamAssassin, a highly customizable spam filter. A milter-compatible MTA such as Sendmail or Postfix is required...

Fedora Update for spamass-milter FEDORA-2010-5176

Check for the Version of spamass-milter OpenVAS Vulnerability Test Fedora Update for spamass-milter FEDORA-2010-5176 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Fedora Update for spamass-milter FEDORA-2010-5096

Check for the Version of spamass-milter OpenVAS Vulnerability Test Fedora Update for spamass-milter FEDORA-2010-5096 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

CVE-2010-1132

The mlfienvrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacters in the RCPT TO field of an email message...

DEBIAN-CVE-2010-1132

The mlfienvrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacters in the RCPT TO field of an email message...

Design/Logic Flaw

The mlfienvrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacters in the RCPT TO field of an email message...

CVE-2010-1132

The mlfienvrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacters in the RCPT TO field of an email message...

CVE-2010-1132

The mlfienvrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacters in the RCPT TO field of an email message...

CVE-2010-1132

CVE-2010-1132 affects spamass-milter (SpamAssassin Milter Plugin) 0.3.1, where using the -x (expand) option allows remote attackers to craft RCPT TO data that executes arbitrary shell commands on the server. The root cause is unsanitized input during alias expansion via the milter, enabling comma...