spamassassin vulnerabilities (Debian)

16 vulnerabilities.

• spamassassin Debian Apache SpamAssassin has an OS Command Injection vulnerability CVE-2020-1946 Fix available 9.8 CriticalDecember 31, 2020
• spamassassin Debian A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted... CVE-2020-1930 Fix available 8.1 HighJanuary 30, 2020
• spamassassin Debian A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted... CVE-2020-1931 Fix available 8.1 HighJanuary 30, 2020
• spamassassin Debian In Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources... CVE-2019-12420 Fix available 7.5 HighDecember 12, 2019
• spamassassin Debian In Apache SpamAssassin before 3.4.3, nefarious CF files can be configured to run system commands... CVE-2018-11805 Fix available 6.7 MediumDecember 12, 2019
• spamassassin Debian Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax. CVE-2018-11781 Fix available 7.8 HighSeptember 17, 2018
• spamassassin Debian A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin... CVE-2018-11780 Fix available EPSS 10.8% 9.8 CriticalSeptember 17, 2018
• spamassassin Debian A denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2.... CVE-2017-15705 Fix available 5.3 MediumSeptember 17, 2018
• spamassassin Debian (1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin... CVE-2016-1238 Fix available 7.8 HighJuly 25, 2016
• spamassassin Debian SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual... CVE-2007-2873 Fix available 1.9 LowJune 11, 2007
• spamassassin Debian Apache SpamAssassin before 3.1.8 allows remote attackers to cause a denial of service via long... CVE-2007-0451 Fix available 4.3 MediumFebruary 16, 2007
• spamassassin Debian SpamAssassin before 3.1.3, when running with vpopmail and the paranoid (-P) switch, allows remote... CVE-2006-2447 Public exploitFix available EPSS 75.8% 5.1 MediumJune 6, 2006
• spamassassin Debian SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of... CVE-2005-3351 Fix available 5.0 MediumNovember 20, 2005
• spamassassin Debian Apache SpamAssassin 3.0.1, 3.0.2, and 3.0.3 allows remote attackers to cause a denial of service ... CVE-2005-1266 Fix available 5.0 MediumJune 15, 2005
• spamassassin Debian SpamAssassin 2.5x, and 2.6x before 2.64, allows remote attackers to cause a denial of service via... CVE-2004-0796 Fix available 5.0 MediumAugust 24, 2004
• spamassassin Debian Off-by-one buffer overflow in spamc of SpamAssassin 2.40 through 2.43, when using BSMTP mode ("-B... CVE-2003-1557 Fix available 7.6 HighDecember 31, 2003