EUVD-2008-7063

Malware in sbrugna...

CVE-2019-6800

In TitanHQ SpamTitan through 7.03, a vulnerability exists in the spam rule update function. Updates are downloaded over HTTP, including scripts which are subsequently executed with root permissions. An attacker with a privileged network position is trivially able to inject arbitrary commands...

CVE-2019-6800: Improper Neutralization of Special Elements in Output Used by a Downstream Component

In TitanHQ SpamTitan through 7.03, a vulnerability exists in the spam rule update function. Updates are downloaded over HTTP, including scripts which are subsequently executed with root permissions. An attacker with a privileged network position is trivially able to inject arbitrary commands...

PT-2019-18359

Name of the Vulnerable Software and Affected Versions TitanHQ SpamTitan versions 7.03 and earlier Description A vulnerability exists in the spam rule update function of the affected software. Updates are downloaded over HTTP, including scripts that are subsequently executed with root permissions...

Design/Logic Flaw

Sophos PureMessage Scanner service PMScanner.exe in PureMessage for Microsoft Exchange 3.0 before 3.0.2 allows remote attackers to cause a denial of service message queue delay and incomplete spam rule update via a crafted 1 RTF or 2 PDF file...