PT-2010-2848 · Apache · Spamassassin Milter Plugin

Published 2010-03-26 · Updated 2017-08-17 · CVE-2010-1132

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SpamAssassin Milter Plugin version 0.3.1

Description The issue allows remote attackers to execute arbitrary system commands via shell metacharacters in the RCPT TO field of an email message, specifically when the expand option is used in the mlfi envrcpt function.

Recommendations For SpamAssassin Milter Plugin version 0.3.1, consider disabling the expand option in the mlfi envrcpt function as a temporary workaround until a patch is available. Restrict access to the mlfi envrcpt function to minimize the risk of exploitation. Avoid using shell metacharacters in the RCPT TO field of email messages until the issue is resolved.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2010-1132

DSA-2021-1

DSA-2021-2

Affected Products

Spamassassin Milter Plugin

References · 24

• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2010-03/0139.html · Exploit
• 🔥 http://securityfocus.com/bid/38578 · Exploit
• 🔥 http://exploit-db.com/exploits/11662 · Exploit
• 🔥 https://exploit-db.com/exploits/11662 · Exploit
• http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038572.html · Vendor Advisory
• http://vupen.com/english/advisories/2010/0559 · Vendor Advisory
• http://secunia.com/advisories/38956 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2010-1132 · Vendor Advisory
• http://secunia.com/advisories/39265 · Vendor Advisory
• http://debian.org/security/2010/dsa-2021 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-1132 · Security Note
• https://osv.dev/vulnerability/CVE-2010-1132 · Vendor Advisory
• http://secunia.com/advisories/38840 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-1132 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038777.html · Vendor Advisory