spamassassin

15 results · Feed

• Unscored —
  CVE-2020-1946

  Apache SpamAssassin has an OS Command Injection vulnerability

  In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA version 3.4.5, us…

  Apache Software Foundation Apache SpamAssassin spamassassin spamassassin Debian Ubuntu Alpine
  Mar 25, 2021
• Unscored —
  CVE-2020-1930

  A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious rule configurati…

  Apache Software Foundation Apache SpamAssassin spamassassin spamassassin Debian Ubuntu Alpine
  Jan 30, 2020
• Unscored —
  CVE-2020-1931

  A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious Configuration (.…

  Apache Software Foundation Apache SpamAssassin spamassassin spamassassin Debian Ubuntu Alpine
  Jan 30, 2020
• Unscored —
  CVE-2019-12420

  In Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources. Upgrading to SA 3.4.…

  Apache Apache SpamAssassin spamassassin spamassassin Debian Ubuntu Alpine
  Dec 12, 2019
• Unscored —
  CVE-2018-11805

  In Apache SpamAssassin before 3.4.3, nefarious CF files can be configured to run system commands without any output or …

  Apache Apache SpamAssassin spamassassin spamassassin Debian Ubuntu Alpine
  Dec 12, 2019
• Unscored —
  CVE-2018-11781

  Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.

  Apache Software Foundation Apache SpamAssassin spamassassin spamassassin Debian Ubuntu Alpine
  Sep 17, 2018
• Unscored —
  CVE-2018-11780 EPSS 11%

  A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2.

  Apache Software Foundation Apache SpamAssassin spamassassin spamassassin Debian Ubuntu Alpine
  Sep 17, 2018
• Unscored —
  CVE-2017-15705

  A denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2. The vulnerability ari…

  Apache Software Foundation Apache SpamAssassin spamassassin spamassassin Debian Ubuntu Alpine
  Sep 17, 2018
• Unscored —
  CVE-2003-1557

  Off-by-one buffer overflow in spamc of SpamAssassin 2.40 through 2.43, when using BSMTP mode ("-B"), allows remote atta…

  spamassassin Debian
  Apr 4, 2008
• Unscored —
  CVE-2007-2873

  SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual configurations using vpopmail or …

  spamassassin Debian
  Jun 11, 2007
• Unscored —
  CVE-2007-0451

  Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long URLs in malformed HTML, …

  spamassassin Debian
  Feb 16, 2007
• Unscored —
  CVE-2006-2447 Public exploit EPSS 76%

  SpamAssassin before 3.1.3, when running with vpopmail and the paranoid (-P) switch, allows remote attackers to execute …

  spamassassin Debian
  Jun 6, 2006
• Unscored —
  CVE-2005-3351

  SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients ("To" addr…

  spamassassin Debian
  Nov 20, 2005
• Unscored —
  CVE-2005-1266

  Apache SpamAssassin 3.0.1, 3.0.2, and 3.0.3 allows remote attackers to cause a denial of service (CPU consumption and s…

  spamassassin Debian
  Jun 22, 2005
• Unscored —
  CVE-2004-0796

  SpamAssassin 2.5x, and 2.6x before 2.64, allows remote attackers to cause a denial of service via certain malformed mes…

  spamassassin Debian
  Aug 24, 2004