Gentoo Linux Security Advisory GLSA 200606-09
https://security.gentoo.org/
Severity: High
Title: SpamAssassin: Execution of arbitrary code
Date: June 11, 2006
Bugs: #135746
ID: 200606-09
Synopsis
=======
SpamAssassin, when running with certain options, could allow local or
even remote attackers to execute arbitrary commands, possibly as the
root user.
Background
=========
SpamAssassin is an extensible email filter used to identify junk email.
spamd is the daemonized version of SpamAssassin.
Affected packages
================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 mail-filter/spamassassin < 3.1.3 >= 3.1.3
==========
When spamd is run with both the "--vpopmail" (-v) and "--paranoid" (-P)
...
style>.gentoo_availability{display:block;}
Get the latest Linux and open source security news straight to your inbox.