National Cyber Awareness System

Vulnerability Summary for CVE-2010-1132

Overview

The mlfi_envrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacters in the RCPT TO field of an email message.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: https://savannah.nongnu.org/bugs/?29136

Hyperlink:https://savannah.nongnu.org/bugs/?29136

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=572117

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=572117

External Source: XF

Name: spamassassin-expand-command-execution(56732)

Hyperlink:http://xforce.iss.net/xforce/xfdb/56732

External Source: VUPEN

Name: ADV-2010-0837

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2010/0837

External Source: VUPEN

Name: ADV-2010-0683

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2010/0683

External Source: VUPEN

Name: ADV-2010-0559

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2010/0559

External Source: SECTRACK

Name: 1023691

Hyperlink:http://www.securitytracker.com/id?1023691

External Source: BID

Name: 38578

Hyperlink:http://www.securityfocus.com/bid/38578

External Source: EXPLOIT-DB

Name: 11662

Hyperlink:http://www.exploit-db.com/exploits/11662

External Source: DEBIAN

Name: DSA-2021

Hyperlink:http://www.debian.org/security/2010/dsa-2021

External Source: SECUNIA

Name: 39265

Type: Advisory

Hyperlink:http://secunia.com/advisories/39265

External Source: SECUNIA

Name: 38956

Type: Advisory

Hyperlink:http://secunia.com/advisories/38956

External Source: SECUNIA

Name: 38840

Type: Advisory

Hyperlink:http://secunia.com/advisories/38840

External Source: OSVDB

Name: 62809

Hyperlink:http://osvdb.org/62809

External Source: FEDORA

Name: FEDORA-2010-5112

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038777.html

External Source: FEDORA

Name: FEDORA-2010-5176

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038572.html

External Source: FEDORA

Name: FEDORA-2010-5096

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038535.html

External Source: CONFIRM

Name: http://bugs.debian.org/573228

Hyperlink:http://bugs.debian.org/573228

External Source: FULLDISC

Name: 20100307 Spamassassin Milter Plugin Remote Root

Hyperlink:http://archives.neohapsis.com/archives/fulldisclosure/2010-03/0139.html