| Package | Affected versions | Patched versions |
|---|---|---|
| spamtitan | ≥ 7.00, ≤ 7.03 |
In TitanHQ SpamTitan through 7.03, a vulnerability exists in the spam rule update function. Updates are downloaded over HTTP, including scripts which are subsequently executed with root permissions. An attacker with a privileged network position is trivially able to inject arbitrary commands.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free