Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2006-2447
HistoryJun 06, 2006 - 12:00 a.m.

CVE-2006-2447

2006-06-0600:00:00
ubuntu.com
ubuntu.com
8

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.947 High

EPSS

Percentile

99.3%

JSON

SpamAssassin before 3.1.3, when running with vpopmail and the paranoid (-P)
switch, allows remote attackers to execute arbitrary commands via a crafted
message that is not properly handled when invoking spamd with the virtual
pop username.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchspamassassin< 3.1.0a-2ubuntu1.1UNKNOWN
ubuntu6.10noarchspamassassin< 3.1.4-1ubuntu1UNKNOWN
ubuntu7.04noarchspamassassin< 3.1.4-1ubuntu1UNKNOWN

Related

cve 1
nessus 11
saint 4
openvas 10
exploitpack 1
nvd 1
debiancve 1
centos 1
veracode 1
prion 1
cvelist 1
seebug 3
redhat 1
gentoo 1
securityvulns 1
packetstorm 1
debian 1
checkpoint_advisories 1
metasploit 1
exploitdb 2
fedora 2
cve
cve
CVE-2006-2447
2006-06-06 21:06:00
nessus
nessus
RHEL 4 : spamassassin (RHSA-2006:0543)
2006-06-08 00:00:00
CentOS 4 : spamassassin (CESA-2006:0543)
2006-07-05 00:00:00
GLSA-200606-09 : SpamAssassin: Execution of arbitrary code
2006-06-16 00:00:00
saint
saint
SpamAssassin spamd vpopmail user vulnerability
2006-06-09 00:00:00
SpamAssassin spamd vpopmail user vulnerability
2006-06-09 00:00:00
SpamAssassin spamd vpopmail user vulnerability
2006-06-09 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200606-09 (Spamassassin)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200606-09 (Spamassassin)
2008-09-24 00:00:00
SLES9: Security update for SpamAssassin
2009-10-10 00:00:00
exploitpack
exploitpack
SpamAssassin spamd 3.1.3 - Command Injection (Metasploit)
2006-06-06 00:00:00
nvd
nvd
CVE-2006-2447
2006-06-06 21:06:00
debiancve
debiancve
CVE-2006-2447
2006-06-06 21:06:00
centos
centos
spamassassin security update
2006-06-06 21:40:09
veracode
veracode
Remote Code Execution (RCE)
2020-04-10 00:13:09
prion
prion
Design/Logic Flaw
2006-06-06 21:06:00
cvelist
cvelist
CVE-2006-2447
2006-06-06 21:00:00
seebug
seebug
SpamAssassin spamd Remote Command Execution
2014-07-01 00:00:00
SpamAssassin spamd <= 3.1.3 - Command Injection
2014-07-01 00:00:00
SpamAssassin spamd &lt;= 3.1.3 Command Injection
2006-06-06 00:00:00
redhat
redhat
(RHSA-2006:0543) spamassassin security update
2006-06-06 00:00:00
gentoo
gentoo
SpamAssassin: Execution of arbitrary code
2006-06-11 00:00:00
securityvulns
securityvulns
[Full-disclosure] [SECURITY] [DSA 1090-1] New spamassassin packages fix remote command execution
2006-06-06 00:00:00
packetstorm
packetstorm
SpamAssassin spamd Remote Command Execution
2009-10-28 00:00:00
debian
debian
[SECURITY] [DSA 1090-1] New spamassassin packages fix remote command execution
2006-06-06 09:17:42
checkpoint_advisories
checkpoint_advisories
SpamAssassin Spamd Configurable Options Code Execution (CVE-2006-2447)
2009-12-01 00:00:00
metasploit
metasploit
SpamAssassin spamd Remote Command Execution
2008-07-19 15:40:30
exploitdb
exploitdb
SpamAssassin spamd 3.1.3 - Command Injection (Metasploit)
2006-06-06 00:00:00
SpamAssassin spamd - Remote Command Execution (Metasploit)
2010-04-30 00:00:00
fedora
fedora
[SECURITY] Fedora Core 5 Update: spamassassin-3.1.8-1.fc5
2007-02-15 19:48:41
[SECURITY] Fedora Core 5 Update: spamassassin-3.1.9-1.fc5.1
2007-06-12 21:36:03

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.947 High

EPSS

Percentile

99.3%

JSON
Related for UB:CVE-2006-2447
cve1nessus11saint4openvas10exploitpack1nvd1debiancve1centos1veracode1prion1cvelist1seebug3redhat1gentoo1securityvulns1packetstorm1debian1checkpoint_advisories1metasploit1exploitdb2fedora2