SpamAssassin Milter Plugin is prone to a remote command- injection vulnerability because it fails to adequately sanitize user-supplied input data. Remote attackers can exploit this issue to execute arbitrary shell commands with root privileges. SpamAssassin Milter Plugin 0.3.1 is affected other versions may also be vulnerable.

• http://savannah.nongnu.org/projects/spamass-milt/
• http://seclists.org/fulldisclosure/2010/Mar/140
• http://www.securityfocus.com/bid/38578

---

Updated on 2015-03-25