CVE-2018-11805

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2020-04/msg00003.html
• openwall.com/lists/oss-security/2019/12/12/1 · Mailing List
• openwall.com/lists/oss-security/2020/01/30/2
• openwall.com/lists/oss-security/2020/01/30/3
• bz.apache.org/SpamAssassin/show_bug.cgi · Permissions Required
• lists.apache.org/thread.html/0b5c73809d0690527341d940029f743807b70550050fd23ee869c5e5%40%3Cusers.spamassassin.apache.org%3E
• lists.apache.org/thread.html/2946b38caec47f7f6a79e8e03d2aa723794186e59a7dc6b5e76dfc18%40%3Cannounce.spamassassin.apache.org%3E
• lists.apache.org/thread.html/6f89f82a573ea616dce53ec67e52d963618a9f9ac71da5c1efdbd166%40%3Cusers.spamassassin.apache.org%3E
• lists.apache.org/thread.html/8534b60bae95ac3a8a4adb840f4ab26135f1c973ce197ff44439cbae%40%3Cusers.spamassassin.apache.org%3E

spamassassin のその他の脆弱性

• CVE-2020-1946緊急 9.8In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or…
• CVE-2020-1931高 8.1A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious Configuration (.cf) files can be conf…
• CVE-2020-1930高 8.1A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious rule configuration (.cf) files can be…
• CVE-2019-12420高 7.5In Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources. Upgrading to SA 3.4.3 as soon as possible…
• CVE-2018-11781高 7.8Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.