Skip to content
OpenAdvisories
Unscored CVE-2019-13612 EUVD-2019-5047GHSA-gj3m-6662-4v94

MDaemon Email Server 19 through 20.0.1 skips SpamAssassin checks by default for e-mail messages larger than 2 MB (and limits checks to 10 M…

Published Jul 16, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Description

MDaemon Email Server 19 through 20.0.1 skips SpamAssassin checks by default for e-mail messages larger than 2 MB (and limits checks to 10 MB even with special configuration), which is arguably inconsistent with currently popular message sizes. This might interfere with risk management for malicious e-mail, if a customer deploys a server with sufficient resources to scan large messages.

References