Количество 14
Количество 14
GHSA-qmmx-pr2m-q429
In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA version 3.4.5, users should only use update channels or 3rd party .cf files from trusted places.
CVE-2020-1946
In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA version 3.4.5, users should only use update channels or 3rd party .cf files from trusted places.
CVE-2020-1946
In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA version 3.4.5, users should only use update channels or 3rd party .cf files from trusted places.
CVE-2020-1946
In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA version 3.4.5, users should only use update channels or 3rd party .cf files from trusted places.
CVE-2020-1946
In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf ...
RLSA-2021:4315
Moderate: spamassassin security update
ELSA-2021-4315
ELSA-2021-4315: spamassassin security update (MODERATE)
BDU:2021-01910
Уязвимость программного средства для фильтрации спама Apache SpamAssassin, связанная с отсутствием мер по нейтрализации специальных элементов, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
openSUSE-SU-2021:0551-1
Security update for spamassassin
SUSE-SU-2021:1163-1
Security update for spamassassin
SUSE-SU-2021:1153-1
Security update for spamassassin
SUSE-SU-2021:1152-1
Security update for spamassassin
ALT-PU-2021-1558
ALT-PU-2021-1558: package `spamassassin-rules` update to version 3.4.5-alt1
ALT-PU-2021-1557
ALT-PU-2021-1557: package `spamassassin` update to version 3.4.5-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-qmmx-pr2m-q429 In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA version 3.4.5, users should only use update channels or 3rd party .cf files from trusted places. | CVSS3: 9.8 | 6% Низкий | больше 4 лет назад |
 | CVE-2020-1946 In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA version 3.4.5, users should only use update channels or 3rd party .cf files from trusted places. | CVSS3: 9.8 | 6% Низкий | больше 5 лет назад |
 | CVE-2020-1946 In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA version 3.4.5, users should only use update channels or 3rd party .cf files from trusted places. | CVSS3: 7.8 | 6% Низкий | больше 5 лет назад |
 | CVE-2020-1946 In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA version 3.4.5, users should only use update channels or 3rd party .cf files from trusted places. | CVSS3: 9.8 | 6% Низкий | больше 5 лет назад |
| CVE-2020-1946 In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf ... | CVSS3: 9.8 | 6% Низкий | больше 5 лет назад |
 | RLSA-2021:4315 Moderate: spamassassin security update | 6% Низкий | почти 5 лет назад | |
| ELSA-2021-4315 ELSA-2021-4315: spamassassin security update (MODERATE) | 6% Низкий | почти 5 лет назад | |
 | BDU:2021-01910 Уязвимость программного средства для фильтрации спама Apache SpamAssassin, связанная с отсутствием мер по нейтрализации специальных элементов, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании | CVSS3: 9.8 | 6% Низкий | больше 5 лет назад |
 | openSUSE-SU-2021:0551-1 Security update for spamassassin | больше 5 лет назад | ||
| SUSE-SU-2021:1163-1 Security update for spamassassin | больше 5 лет назад | ||
| SUSE-SU-2021:1153-1 Security update for spamassassin | больше 5 лет назад | ||
| SUSE-SU-2021:1152-1 Security update for spamassassin | больше 5 лет назад | ||
| ALT-PU-2021-1558 ALT-PU-2021-1558: package `spamassassin-rules` update to version 3.4.5-alt1 | CVSS3: 9.8 | 6% Низкий | больше 5 лет назад |
| ALT-PU-2021-1557 ALT-PU-2021-1557: package `spamassassin` update to version 3.4.5-alt1 | CVSS3: 9.8 | 6% Низкий | больше 5 лет назад |
Уязвимостей на страницу