CVE-2006-2447

SpamAssassin before 3.1.3, when running with vpopmail and the paranoid (-P) switch, allows remote attackers to execute arbitrary commands via a crafted message that is not properly handled when invoking spamd with the virtual pop username.

CVSS v2.0 NVD

5.1 MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:P

EPSS

75.81% chance of exploitation in the next 30 days, 100th percentile

Published

2006-06-06

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/unix/misc/spamassassin_exec.rb

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/16920
• https://www.exploit-db.com/exploits/9914

Security advisories

• http://secunia.com/advisories/20430
• http://secunia.com/advisories/20443
• http://secunia.com/advisories/20482
• http://secunia.com/advisories/20531
• http://secunia.com/advisories/20566
• http://secunia.com/advisories/20692
• http://www.debian.org/security/2006/dsa-1090
• http://www.redhat.com/support/errata/RHSA-2006-0543.html
• http://www.vupen.com/english/advisories/2006/2148
• http://www.nabble.com/ANNOUNCE%3A-Apache-SpamAssassin-3.1.3-available%21-t1736096.html
• http://www.securityfocus.com/bid/18290
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:103

References

• CVE Record
• NVD entry