Showing 1 - 2 of 2

CVE-2020-1931

Status Candidate

Overview

A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious Configuration (.cf) files can be configured to run system commands similar to CVE-2018-11805. This issue is less stealthy and attempts to exploit the issue will throw warnings. Thanks to Damian Lukowski at credativ for reporting the issue ethically. With this bug unpatched, exploits can be injected in a number of scenarios though doing so remotely is difficult. In addition to upgrading to SA 3.4.4, we again recommend that users should only use update channels or 3rd party .cf files from trusted places.

Related Files

Red Hat Security Advisory 2020-4625-01: Posted Nov 4, 2020; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2020-4625-01 - The SpamAssassin tool provides a way to reduce unsolicited commercial email from incoming email. Issues addressed include code execution and denial of service vulnerabilities.; tags | advisory, denial of service, vulnerability, code execution; systems | linux, redhat; advisories | CVE-2018-11805, CVE-2019-12420, CVE-2020-1930, CVE-2020-1931; SHA-256 | 7f14fdebd4b69af317cd14645b4f946092ae86c9bac53a95fbf1456b97d34a68; Download | Favorite | View

Debian Security Advisory 4615-1: Posted Feb 3, 2020; Authored by Debian | Site debian.org; Debian Linux Security Advisory 4615-1 - Two vulnerabilities were discovered in spamassassin, a Perl-based spam filter using text analysis. Malicious rule or configuration files, possibly downloaded from an updates server, could execute arbitrary commands under multiple scenarios.; tags | advisory, arbitrary, perl, vulnerability; systems | linux, debian; advisories | CVE-2020-1930, CVE-2020-1931; SHA-256 | 03a369105465ab891d0ad9ac2729ea84660e0bb558e98aa0f5f19ad82d5d3bfe; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days

Red Hat 219 files
Jay Turla 150 files
indoushka 143 files
Ubuntu 60 files
h00die 54 files
juan vazquez 43 files
sinn3r 41 files
Gentoo 33 files
H D Moore 31 files
Debian 29 files

File Archives

Systems

AIX (429)
Apple (2,104)
BSD (378)
CentOS (61)
Cisco (1,954)
Debian (7,114)
Fedora (1,693)
FreeBSD (1,247)
Gentoo (4,567)
HPUX (880)
iOS (387)
iPhone (108)
IRIX (220)
Juniper (71)
Linux (50,978)
Mac OS X (696)
Mandriva (3,105)
NetBSD (256)
OpenBSD (489)
RedHat (16,661)
Slackware (941)
Solaris (1,614)
SUSE (1,444)
Ubuntu (9,794)
UNIX (9,443)
UnixWare (187)
Windows (6,756)
Other

CVE-2020-1931

Overview

Related Files

File Archive:

September 2024

Top Authors In Last 30 Days

File Tags

File Archives

Systems