The remote host is missing an update to the system as announced in the referenced advisory.

Update your system with the appropriate patches or software upgrades. http://archives.neohapsis.com/archives/fulldisclosure/2010-03/0139.html http://xforce.iss.net/xforce/xfdb/56732 http://www.vuxml.org/freebsd/7132c842-58e2-11df-8d80-0015587e2cc1.html

The following package is affected: spamass-milter CVE-2010-1132 The mlfi_envrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacters in the RCPT TO field of an email message.