Количество 12
Количество 12
CVE-2020-1946
In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA version 3.4.5, users should only use update channels or 3rd party .cf files from trusted places.
CVE-2020-1946
In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA version 3.4.5, users should only use update channels or 3rd party .cf files from trusted places.
CVE-2020-1946
In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA version 3.4.5, users should only use update channels or 3rd party .cf files from trusted places.
CVE-2020-1946
In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf ...
RLSA-2021:4315
Moderate: spamassassin security update
GHSA-qmmx-pr2m-q429
In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA version 3.4.5, users should only use update channels or 3rd party .cf files from trusted places.
ELSA-2021-4315
ELSA-2021-4315: spamassassin security update (MODERATE)
BDU:2021-01910
Уязвимость программного средства для фильтрации спама Apache SpamAssassin, связанная с отсутствием мер по нейтрализации специальных элементов, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
openSUSE-SU-2021:0551-1
Security update for spamassassin
SUSE-SU-2021:1163-1
Security update for spamassassin
SUSE-SU-2021:1153-1
Security update for spamassassin
SUSE-SU-2021:1152-1
Security update for spamassassin
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2020-1946 In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA version 3.4.5, users should only use update channels or 3rd party .cf files from trusted places. | CVSS3: 9.8 | 1% Низкий | больше 4 лет назад | |
CVE-2020-1946 In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA version 3.4.5, users should only use update channels or 3rd party .cf files from trusted places. | CVSS3: 7.8 | 1% Низкий | больше 4 лет назад | |
CVE-2020-1946 In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA version 3.4.5, users should only use update channels or 3rd party .cf files from trusted places. | CVSS3: 9.8 | 1% Низкий | больше 4 лет назад | |
CVE-2020-1946 In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf ... | CVSS3: 9.8 | 1% Низкий | больше 4 лет назад | |
RLSA-2021:4315 Moderate: spamassassin security update | 1% Низкий | около 4 лет назад | ||
GHSA-qmmx-pr2m-q429 In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA version 3.4.5, users should only use update channels or 3rd party .cf files from trusted places. | CVSS3: 9.8 | 1% Низкий | больше 3 лет назад | |
ELSA-2021-4315 ELSA-2021-4315: spamassassin security update (MODERATE) | около 4 лет назад | |||
BDU:2021-01910 Уязвимость программного средства для фильтрации спама Apache SpamAssassin, связанная с отсутствием мер по нейтрализации специальных элементов, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании | CVSS3: 9.8 | 1% Низкий | почти 5 лет назад | |
openSUSE-SU-2021:0551-1 Security update for spamassassin | больше 4 лет назад | |||
SUSE-SU-2021:1163-1 Security update for spamassassin | больше 4 лет назад | |||
SUSE-SU-2021:1153-1 Security update for spamassassin | больше 4 лет назад | |||
SUSE-SU-2021:1152-1 Security update for spamassassin | больше 4 лет назад |
Уязвимостей на страницу