Remote Code Execution (RCE)

SpamAssassin is vulnerable to Remote Code Execution RCE. A flaw was found with the way the Spamassassin spamd daemon processes the virtual pop username passed to it. If a site is running spamd with both the --vpopmail and --paranoid flags, it is possible for a remote user with the ability to...