CVE catalog

CVE-2010-1132

spamass-milter: CVE-2010-1132

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
8.55% · Oct 27, 2026

The mlfi_envrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacters in the RCPT TO field of an email message.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianspamass-miltersid0.4.0-5fixed
Debianspamass-milterforky0.4.0-5fixed
Debianspamass-miltertrixie0.4.0-2fixed
Debianspamass-milterbookworm0.4.0-2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianspamass-miltersourcesid0.3.1-9not yet assignedNot reported[573228]
Debianspamass-miltersourceforky0.3.1-9not yet assignedNot reported[573228]
Debianspamass-miltersourcetrixie0.3.1-9not yet assignedNot reported[573228]
Debianspamass-miltersourcebookworm0.3.1-9not yet assignedNot reported[573228]

[Debian bug #573228]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [spamass-milter]Fixed
    Details (2)

    • 0.4.0-2 · amd64 · bookworm

      Fixed · Fixed: 0.3.1-9

      dsa · spamass-milter · debian · bookworm; dsa · spamass-milter · debian · 12

    • 0.4.0-2 · arm64 · bookworm

      Fixed · Fixed: 0.3.1-9

      dsa · spamass-milter · debian · bookworm; dsa · spamass-milter · debian · 12

[Debian 13 (Trixie)]

  • [spamass-milter]Fixed

    Source package: [spamass-milter]

    Details (2)

    • 0.4.0-2 · amd64 · trixie

      Fixed · Fixed: 0.3.1-9

      dsa · spamass-milter · debian · 13

    • 0.4.0-2+b1 · arm64 · trixie

      Fixed · Fixed: 0.3.1-9

      dsa · spamass-milter · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]