Denial Of Service (DoS)

SpamAssassin is vulnerable to Denial Of Service DoS. A local user could use this flaw to create or overwrite files writable by the spamd process...

Remote Code Execution (RCE)

SpamAssassin is vulnerable to Remote Code Execution RCE. A flaw was found with the way the Spamassassin spamd daemon processes the virtual pop username passed to it. If a site is running spamd with both the --vpopmail and --paranoid flags, it is possible for a remote user with the ability to...

ALPINE-CVE-2020-1930

A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious rule configuration .cf files can be configured to run system commands similar to CVE-2018-11805. With this bug unpatched, exploits can be injected in a number of scenarios including the same...

CVE-2020-1930: Improper Neutralization of Special Elements used in an OS Command

A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious rule configuration .cf files can be configured to run system commands similar to CVE-2018-11805. With this bug unpatched, exploits can be injected in a number of scenarios including the same...

cPanel cross-site scripting vulnerability (CNVD-2019-29011)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the WHM Spamd Startup Config in versions prior to cPanel 68.0.27. The vulnerabilit...

CVE-2016-10818

cPanel before 57.9999.54 incorrectly sets log-file permissions in dnsadmin-startup and spamd-startup SEC-124...

Design/Logic Flaw

cPanel before 57.9999.54 incorrectly sets log-file permissions in dnsadmin-startup and spamd-startup SEC-124...

CVE-2018-20951

cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config SEC-387...

Design/Logic Flaw

cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config SEC-387...

CVE-2018-20951

cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config SEC-387...

CVE-2018-20951: Improper Neutralization of Input During Web Page Generation

cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config SEC-387...

CVE-2016-10818: Undefined Security Weakness

cPanel before 57.9999.54 incorrectly sets log-file permissions in dnsadmin-startup and spamd-startup SEC-124...

SpamAssassin Spamd Configurable Options Code Execution (CVE-2006-2447)

SpamAssassin is a mail filter which attempts to identify spam using a variety of mechanisms, including text analysis, DNS blocklists, and collaborative filtering databases. The product is also embedded in numerous commercial anti-spam products offered by a broad range of vendors. There are numero...

Fedora Update for spamassassin FEDORA-2007-0390

Check for the Version of spamassassin OpenVAS Vulnerability Test Fedora Update for spamassassin FEDORA-2007-0390 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for spamassassin FEDORA-2007-242

Check for the Version of spamassassin OpenVAS Vulnerability Test Fedora Update for spamassassin FEDORA-2007-242 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

[Full-disclosure] rPSA-2007-0119-1 spamassassin

rPath Security Advisory: 2007-0119-1 Published: 2007-06-13 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Indirect User Deterministic Denial of Service Updated Versions: spamassassin=/conary.rpath.com@rpl:devel//1/3.2.1-0.1-1 References: https://vulners.com/cve/CVE-2007-2873...

[SECURITY] Fedora Core 5 Update: spamassassin-3.1.9-1.fc5.1

SpamAssassin provides you with a way to reduce if not completely eliminate Unsolicited Commercial Email SPAM from your incoming email. It can be invoked by a MDA such as sendmail or postfix, or can be called from a procmail script, .forward file, etc. It uses a genetic-algorithm evolved scoring...

DEBIAN-CVE-2007-2873

SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual configurations using vpopmail or virtual users, allows local users to cause a denial of service corrupt arbitrary files via a symlink attack on a file that is used by spamd...

CVE-2007-2873

SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual configurations using vpopmail or virtual users, allows local users to cause a denial of service corrupt arbitrary files via a symlink attack on a file that is used by spamd...

CVE-2007-2873

SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual configurations using vpopmail or virtual users, allows local users to cause a denial of service corrupt arbitrary files via a symlink attack on a file that is used by spamd...