798 matches found
FreeBSD Ports: p5-Mail-SpamAssassin
The remote host is missing an update to the system as announced in the referenced advisory. VID 8092b820-1d6f-11dc-a0b2-001921ab2fa4 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
SpamAssassin spamd Remote Command Execution
This module exploits a flaw in the SpamAssassin spamd service by specifying a malicious vpopmail User header, when running with vpopmail and paranoid modes enabled non-default. Versions prior to v3.1.3 are vulnerable This module requires Metasploit: https://metasploit.com/download Current source:...
CVE-2003-1557
Off-by-one buffer overflow in spamc of SpamAssassin 2.40 through 2.43, when using BSMTP mode "-B", allows remote attackers to execute arbitrary code via email containing headers with leading "." characters...
CVE-2003-1557
Off-by-one buffer overflow in spamc of SpamAssassin 2.40 through 2.43, when using BSMTP mode "-B", allows remote attackers to execute arbitrary code via email containing headers with leading "." characters...
CVE-2003-1557
CVE-2003-1557 affects SpamAssassin spamc (versions 2.40–2.43). An off-by-one buffer overflow in BSMTP mode (-B) allows remote attackers to trigger arbitrary code execution via email headers starting with a leading "." character. Multiple connected sources (Red Hat, Debian, CVE listings, OSV, NVD)...
Milter Detection
The remote service is a milter, which provides an interface between a mail transfer agent MTA such as sendmail and an application such as SpamAssassin or ClamAV for filtering messages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if...
Debian Security Advisory DSA 736-1 (spamassassin)
The remote host is missing an update to spamassassin announced via advisory DSA 736-1. A vulnerability was recently found in the way that SpamAssassin parses certain email headers. This vulnerability could cause SpamAssassin to consume a large number of CPU cycles when processing messages...
Debian Security Advisory DSA 1090-1 (spamassassin)
The remote host is missing an update to spamassassin announced via advisory DSA 1090-1. A vulnerability has been discoverd in SpamAssassin, a Perl-based spam filter using text analysis, that can allow remote attackers to execute arbitrary commands. This problem only affects systems where spamd is...
Debian: Security Advisory (DSA-736-2)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-1090-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2007-6341
Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service program "croak" via a crafted DNS response...
CVE-2007-6341
Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service program "croak" via a crafted DNS response...
SuSE 10 Security Update : SPAMAssassin (ZYPP Patch Number 3078)
This upgrade brings spamassassin to version 3.1.8 with following changes : - fix for CVE-2007-0451: possible DoS due to incredibly long URIs found in the message content. - disable perl module usage in update channels unless -allowplugins is specified - files with names starting/ending in...
SuSE 10 Security Update : SpamAssassin (ZYPP Patch Number 2521)
Primary it is a version update for the packages spamassassin und perl-spamassasin to version 3.1.7. Furthermore the following bugs were fixed : - SpamAssassin URIDNSBL plugin tries to lookup libraries libimf.so, liblua.so, ... via nameserver - BUG in archive PgSQL.pm SpamAssassin %NASLMINLEVEL...
Fedora 7 : spamassassin-3.2.1-1.fc7 (2007-0390)
Local symlink vulnerability. Fedora is not vulnerable in any default or common configurations. Read upstream's announcement for details. http://spamassassin.apache.org/advisories/CVE-2007-2873.txt Note that Tenable Network Security has extracted the preceding description block directly from the...
openSUSE 10 Security Update : spamassassin (spamassassin-2523)
Primary it is a version update for the packages spamassassin und perl-spamassasin to version 3.1.7. Furthermore the following bugs were fixed : - SpamAssassin URIDNSBL plugin tries to lookup libraries libimf.so, liblua.so, ... via nameserver - BUG in archive PgSQL.pm SpamAssassin %NASLMINLEVEL...
openSUSE 10 Security Update : spamassassin (spamassassin-3077)
This upgrade brings spamassassin to version 3.1.8 with following changes : - fix for CVE-2007-0451: possible DoS due to incredibly long URIs found in the message content. - disable perl module usage in update channels unless --allowplugins is specified - files with names starting/ending in...
openSUSE 10 Security Update : spamassassin (spamassassin-1904)
This update fixes the following security problem in SpamAssassin : - CVE-2006-2447: SpamAssassin when running with vpopmail and the paranoid -P switch, allows remote attackers to execute arbitrary commands via a crafted message that is not properly handled when invoking spamd with the virtual pop...
Code injection
Header.pm in Net::DNS before 0.60, a Perl module, 1 generates predictable sequence IDs with a fixed increment and 2 can use the same starting ID for all child processes of a forking server, which allows remote attackers to spoof DNS responses, as originally reported for qpsmtp and spamassassin...
CVE-2007-3377
Header.pm in Net::DNS before 0.60, a Perl module, 1 generates predictable sequence IDs with a fixed increment and 2 can use the same starting ID for all child processes of a forking server, which allows remote attackers to spoof DNS responses, as originally reported for qpsmtp and spamassassin...