https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 22:58:18 +0000 https://vulnerability.circl.lu/vuln/cve-2018-11805 <p><strong>Affected:</strong> Apache SpamAssassin</p> <p>In Apache SpamAssassin before 3.4.3, nefarious CF files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA 3.4.3, we recommend that users should only use update channels or 3rd party .cf files from trusted places.</p> <p><strong>Affected:</strong> Apache SpamAssassin</p> <p>In Apache SpamAssassin before 3.4.3, nefarious CF files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA 3.4.3, we recommend that users should only use update channels or 3rd party .cf files from trusted places.</p> https://vulnerability.circl.lu/vuln/cve-2018-11805 https://vulnerability.circl.lu/vuln/usn-4237-1 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: spamassassin, Ubuntu:18.04:LTS: spamassassin</p> <p>It was discovered that SpamAssassin incorrectly handled certain CF files. If a user or automated system were tricked into using a specially-crafted CF file, a remote attacker could possibly run arbitrary code. (CVE-2018-11805)</p> <p>It was discovered that SpamAssassin incorrectly handled certain messages. A remote attacker could possibly use this issue to cause SpamAssassin to consume resources, resulting in a denial of service. (CVE-2019-12420)</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: spamassassin, Ubuntu:18.04:LTS: spamassassin</p> <p>It was discovered that SpamAssassin incorrectly handled certain CF files. If a user or automated system were tricked into using a specially-crafted CF file, a remote attacker could possibly run arbitrary code. (CVE-2018-11805)</p> <p>It was discovered that SpamAssassin incorrectly handled certain messages. A remote attacker could possibly use this issue to cause SpamAssassin to consume resources, resulting in a denial of service. (CVE-2019-12420)</p> https://vulnerability.circl.lu/vuln/usn-4237-1