CVE-2006-2447

MEDIUM

5.1

CVSS Severity Score

EPSS Score0.0410%

EPSS Percentile14.43th

Published2006年6月6日

Last Modified2026年4月16日

Vulnerability Description

SpamAssassin before 3.1.3, when running with vpopmail and the paranoid (-P) switch, allows remote attackers to execute arbitrary commands via a crafted message that is not properly handled when invoking spamd with the virtual pop username.

Affected Platforms (CPE)

📦

Apache

Spamassassin

= 3.1.0

📦

Apache

Spamassassin

= 3.1.1

📦

Apache

Spamassassin

= 3.1.2

References & Advisories

🔗 http://secunia.com/advisories/20430

🔗 http://secunia.com/advisories/20443

🔗 http://secunia.com/advisories/20482

🔗 http://secunia.com/advisories/20531

🔗 http://secunia.com/advisories/20566

🔗 http://secunia.com/advisories/20692

🔗 http://securitytracker.com/id?1016230

🔗 http://securitytracker.com/id?1016235

Vulnerability Description

Affected Platforms (CPE)

Spamassassin

Spamassassin

Spamassassin

References & Advisories

関連する脆弱性情報