oss-sec mailing list archives

Re: CVE Request -- SpamAssassin Mail Filter -- arbitrary shell command injection (priv esc)

From: "Steven M. Christey" <coley () linus mitre org>
Date: Fri, 26 Mar 2010 16:32:56 -0400 (EDT)


On Wed, 10 Mar 2010, Jan Lieskovsky wrote:

 Security researcher called "Kingcope" pointed out:
[1]http://lists.grok.org.uk/pipermail/full-disclosure/2010-March/073489.html


Sorry for the lateness.

Use CVE-2010-1132, to be filled in shortly.

- Steve

CVE Request -- SpamAssassin Mail Filter -- arbitrary shell command injection (priv esc) Jan Lieskovsky (Mar 10)
- Re: CVE Request -- SpamAssassin Mail Filter -- arbitrary shell command injection (priv esc) Steven M. Christey (Mar 26)