Debian/spamassassin: unknown

SpamAssassin before 3.1.3, when running with vpopmail and the paranoid (-P) switch, allows remote attackers to execute arbitrary commands via a crafted message that is not properly handled when invoki

Action: Upgrade spamassassin to 3.1.3-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2006-2447
• https://security-tracker.debian.org/tracker/CVE-2006-2447

published 2006-06-06T21:06:00Z · modified 2026-10-22T23:47:25.714630396Z · JSON