SpamAssassin Vpopmail and Paranoid Switches Remote Command Execution Vulnerability

Bugtraq ID:	18290
Class:	Design Error
CVE:	CVE-2006-2447
Remote:	Yes
Local:	No
Published:	Jun 06 2006 12:00AM
Updated:	Nov 23 2006 08:05PM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	Trustix Secure Linux 3.0 Trustix Secure Linux 2.2 SpamAssassin SpamAssassin 3.1.2 SpamAssassin SpamAssassin 3.1.1 SpamAssassin SpamAssassin 3.1 SpamAssassin SpamAssassin 3.0.5 SpamAssassin SpamAssassin 3.0.4 SpamAssassin SpamAssassin 3.0.3 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 amd64 + Debian Linux 3.1 alpha + Debian Linux 3.1 SpamAssassin SpamAssassin 3.0.2 SpamAssassin SpamAssassin 3.0.1 SpamAssassin SpamAssassin 3.0 SpamAssassin SpamAssassin 2.64 SpamAssassin SpamAssassin 2.63 SpamAssassin SpamAssassin 2.60 SpamAssassin SpamAssassin 2.55 SpamAssassin SpamAssassin 2.50 0 SpamAssassin SpamAssassin 2.44 SpamAssassin SpamAssassin 2.43 0 + Gentoo Linux 1.4 _rc2 + Gentoo Linux 1.4 _rc1 SpamAssassin SpamAssassin 2.42 0 SpamAssassin SpamAssassin 2.41 0 SpamAssassin SpamAssassin 2.40 rPath rPath Linux 1 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux AS 4 Redhat Desktop 4.0 Mandriva Linux Mandrake 2006.0 x86_64 Mandriva Linux Mandrake 2006.0 Mandriva Linux Mandrake 10.2 x86_64 Mandriva Linux Mandrake 10.2 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 Gentoo Linux Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1
Not Vulnerable:	SpamAssassin SpamAssassin 3.1.3 SpamAssassin SpamAssassin 3.0.6

SpamAssassin Vpopmail and Paranoid Switches Remote Command Execution Vulnerability

SpamAssassin is prone to an arbitrary-command-execution vulnerability. This issue is due to an error in the application when processing a specially formatted input message when certain switches are set.

An attacker can exploit this issue to execute arbitrary comannds on the vulnerable computer with the privileges of the affected application.

SpamAssassin Vpopmail and Paranoid Switches Remote Command Execution Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

SpamAssassin Vpopmail and Paranoid Switches Remote Command Execution Vulnerability

Solution:
The vendor has addressed this issue in the 3.0.x strain with version 3.0.6 and in the 3.1.x strain with 3.1.3.

Please see the referenced vendor advisories for more information.


SpamAssassin SpamAssassin 2.63

• Mandriva perl-Mail-SpamAssassin-2.63-3.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva perl-Mail-SpamAssassin-2.63-3.1.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva spamassassin-2.63-3.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva spamassassin-2.63-3.1.C30mdk.src.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva spamassassin-2.63-3.1.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva spamassassin-tools-2.63-3.1.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva spamassassin-tools-2.63-3.1.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download

SpamAssassin SpamAssassin 3.0

• SpamAssassin Mail-SpamAssassin-3.0.6.tar.gz
  http://apache.mirror.rafal.ca/spamassassin/source/Mail-SpamAssassin-3. 0.6.tar.gz

SpamAssassin SpamAssassin 3.0.1

• SpamAssassin Mail-SpamAssassin-3.0.6.tar.gz
  http://apache.mirror.rafal.ca/spamassassin/source/Mail-SpamAssassin-3. 0.6.tar.gz

SpamAssassin SpamAssassin 3.0.2

• Mandriva perl-Mail-SpamAssassin-3.0.4-0.3.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva perl-Mail-SpamAssassin-3.0.4-0.3.102mdk.x86_64.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva spamassassin-3.0.4-0.3.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva spamassassin-3.0.4-0.3.102mdk.src.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva spamassassin-3.0.4-0.3.102mdk.x86_64.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva spamassassin-spamc-3.0.4-0.3.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva spamassassin-spamc-3.0.4-0.3.102mdk.x86_64.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva spamassassin-spamd-3.0.4-0.3.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva spamassassin-spamd-3.0.4-0.3.102mdk.x86_64.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva spamassassin-tools-3.0.4-0.3.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva spamassassin-tools-3.0.4-0.3.102mdk.x86_64.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• SpamAssassin Mail-SpamAssassin-3.0.6.tar.gz
  http://apache.mirror.rafal.ca/spamassassin/source/Mail-SpamAssassin-3. 0.6.tar.gz

SpamAssassin SpamAssassin 3.0.3

• SpamAssassin Mail-SpamAssassin-3.0.6.tar.gz
  http://apache.mirror.rafal.ca/spamassassin/source/Mail-SpamAssassin-3. 0.6.tar.gz

SpamAssassin SpamAssassin 3.0.4

• Mandriva perl-Mail-SpamAssassin-3.0.4-3.3.20060mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva perl-Mail-SpamAssassin-3.0.4-3.3.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva perl-Mail-SpamAssassin-3.0.4-3.3.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva spamassassin-3.0.4-3.3.20060mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva spamassassin-3.0.4-3.3.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva spamassassin-3.0.4-3.3.20060mdk.src.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva spamassassin-3.0.4-3.3.20060mdk.src.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva spamassassin-3.0.4-3.3.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva spamassassin-spamc-3.0.4-3.3.20060mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva spamassassin-spamc-3.0.4-3.3.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva spamassassin-spamd-3.0.4-3.3.20060mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva spamassassin-spamd-3.0.4-3.3.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva spamassassin-spamd-3.0.4-3.3.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva spamassassin-tools-3.0.4-3.3.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva spamassassin-tools-3.0.4-3.3.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• SpamAssassin Mail-SpamAssassin-3.0.6.tar.gz
  http://apache.mirror.rafal.ca/spamassassin/source/Mail-SpamAssassin-3. 0.6.tar.gz


• Trustix perl-mail-spamassassin-3.0.4-4tr.i586.rpm
  Trustix Secure Linux 2.2
  ftp://ftp.trustix.org/pub/trustix/updates/


• Trustix perl-mail-spamassassin-3.0.4-4tr.i586.rpm
  Trustix Secure Linux 3.0
  ftp://ftp.trustix.org/pub/trustix/updates/


• Trustix spamassassin-3.0.4-4tr.i586.rpm
  Trustix Secure Linux 2.2
  ftp://ftp.trustix.org/pub/trustix/updates/


• Trustix spamassassin-3.0.4-4tr.i586.rpm
  Trustix Secure Linux 3.0
  ftp://ftp.trustix.org/pub/trustix/updates/


• Trustix spamassassin-tools-3.0.4-4tr.i586.rpm
  Trustix Secure Linux 2.2
  ftp://ftp.trustix.org/pub/trustix/updates/


• Trustix spamassassin-tools-3.0.4-4tr.i586.rpm
  Trustix Secure Linux 3.0
  ftp://ftp.trustix.org/pub/trustix/updates/

SpamAssassin SpamAssassin 3.0.5

• SpamAssassin Mail-SpamAssassin-3.0.6.tar.gz
  http://apache.mirror.rafal.ca/spamassassin/source/Mail-SpamAssassin-3. 0.6.tar.gz

SpamAssassin SpamAssassin 3.1

• SpamAssassin Mail-SpamAssassin-3.1.3.tar.gz
  http://apache.mirror.rafal.ca/spamassassin/source/Mail-SpamAssassin-3. 1.3.tar.gz

SpamAssassin SpamAssassin 3.1.1

• SpamAssassin Mail-SpamAssassin-3.1.3.tar.gz
  http://apache.mirror.rafal.ca/spamassassin/source/Mail-SpamAssassin-3. 1.3.tar.gz

SpamAssassin SpamAssassin 3.1.2

• SpamAssassin Mail-SpamAssassin-3.1.3.tar.gz
  http://apache.mirror.rafal.ca/spamassassin/source/Mail-SpamAssassin-3. 1.3.tar.gz

SpamAssassin Vpopmail and Paranoid Switches Remote Command Execution Vulnerability

References:

• ANNOUNCE: Apache SpamAssassin 3.0.6 available! (SpamAssassin)
  
• ANNOUNCE: Apache SpamAssassin 3.1.3 available! (SpamAssassin)
  
• RHSA-2006:0543-10 - Moderate: spamassassin security update (Red Hat)
  
• SpamAssassin Home Page (SpamAssassin)
  
• rPSA-2006-0096-1 spamassassin (rPath)