NVD

Id
61146  
Name
CVE-2006-2447  
Description
SpamAssassin before 3.1.3, when running with vpopmail and the paranoid (-P) switch, allows remote attackers to execute arbitrary commands via a crafted message that is not properly handled when invoking spamd with the virtual pop username.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-06-06  
Modified Date
2011-04-07  
Seq
2006-2447  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
315968 61146 CVE-2006-2447 oval:org.mitre.oval:def:9184  View
315969 61146 CVE-2006-2447 1016230  View
315970 61146 CVE-2006-2447 1016235  View
315971 61146 CVE-2006-2447 DSA-1090  View
315972 61146 CVE-2006-2447 GLSA-200606-09  View
315973 61146 CVE-2006-2447 MDKSA-2006:103  View
315974 61146 CVE-2006-2447 http://www.nabble.com/ANNOUNCE%3A-Apache-SpamAssassin-3.1.3-available%21-t1736096.html  View
315975 61146 CVE-2006-2447 RHSA-2006:0543  View
315976 61146 CVE-2006-2447 20060607 rPSA-2006-0096-1 spamassassin  View
315977 61146 CVE-2006-2447 18290  View
315978 61146 CVE-2006-2447 2006-0034  View
315979 61146 CVE-2006-2447 ADV-2006-2148  View
315980 61146 CVE-2006-2447 spamassassin-spamd-command-execution(27008)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58133 JVNDB-2006-000329 SpamAssassin の spamd デーモンにおける任意のシェルコマンドを実行される脆弱性 SpamAssassin の spamd デーモンにおいて、--vpopmail (-v) と、--paranoid (-P) の両方のオプションを設定して稼動している場合に、バーチャルドメイン用のユーザ名の処理が適切に行なわれない脆弱性が存在します。 CVE-2006-2447 18549 CVE-2006-2447 61146 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000329.html 2006-06-06 2007-04-01 View