Multiple vulnerabilities were found in Spamassassin, which could lead to Remote Code Execution and Denial of Service attacks under certain circumstances.

CVE-2016-1238

Many Perl programs do not properly remove . (period) characters from the end of the includes directory array, which might allow local users to gain privileges via a Trojan horse module under the current working directory.

CVE-2017-15705

A denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2. The vulnerability arises with certain unclosed tags in emails that cause markup to be handled incorrectly leading to scan timeouts. This can cause carefully crafted emails that might take more scan time than expected leading to a Denial of Service.

CVE-2018-11780

A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2.

CVE-2018-11781

Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.

For Debian 8 'Jessie', these problems have been fixed in version 3.4.2-0+deb8u1. Upstream strongly advocates upgrading to the latest upstream version so we are following that recommendation and backported the version published as part of the 9.6 stretch release, which also fixes many critical bugs.

We recommend that you upgrade your spamassassin packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201812-07 (SpamAssassin: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in SpamAssassin. Please       review the referenced CVE identifiers for details.
  Impact :

    A remote attacker could execute arbitrary code, escalate privileges, or       cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

According to the versions of the perl packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - Integer underflow in regcomp.c in Perl before 5.20, as     used in Apple OS X before 10.10.5 and other products,     allows context-dependent attackers to execute arbitrary     code or cause a denial of service (application crash)     via a long digit string associated with an invalid     backreference within a regular     expression.(CVE-2013-7422)

  - It was found that perl can load modules from the     current directory if not found in the module     directories, via the @INC path. A local, authenticated     attacker could create a specially crafted module in a     writable directory and trick a user into running a perl     program from that directory if the module is not found     in previous @INC paths, it will load and execute the     attacker's module.(CVE-2016-1238)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the perl-Encode packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - It was found that perl can load modules from the     current directory if not found in the module     directories, via the @INC path. A local, authenticated     attacker could create a specially crafted module in a     writable directory and trick a user into running a perl     program from that directory if the module is not found     in previous @INC paths, it will load and execute the     attacker's module.(CVE-2016-1238)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Sawyer X reports :

Perl 5.x before 5.22.3-RC2 and 5.24 before 5.24.1-RC2 do not properly remove . (period) characters from the end of the includes directory array, which might allow local users to gain privileges via a Trojan horse module under the current working directory.

This update for perl fixes the following issues :

  - CVE-2016-6185: xsloader looking at a '(eval)' directory     [bsc#988311]

  - CVE-2016-1238: searching current directory for optional     modules [bsc#987887]

  - CVE-2015-8853: regex engine hanging on bad utf8     [bnc976584]

  - CVE-2016-2381: environment dup handling bug [bsc#967082]

  - perl panic with utf8_mg_pos_cache_update [bsc#929027]

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
118938	Debian DLA-1578-1 : spamassassin security update	Nessus	Debian Local Security Checks	2018/11/14	2024/7/22	critical
119703	GLSA-201812-07 : SpamAssassin: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2018/12/17	2024/7/15	critical
134485	EulerOS Virtualization for ARM 64 3.0.2.0 : perl (EulerOS-SA-2020-1196)	Nessus	Huawei Local Security Checks	2020/3/13	2024/3/22	high
140994	EulerOS Virtualization for ARM 64 3.0.6.0 : perl-Encode (EulerOS-SA-2020-2046)	Nessus	Huawei Local Security Checks	2020/9/29	2024/2/16	high
92741	FreeBSD : perl -- local arbitrary code execution (72bfbb09-5a6a-11e6-a6c3-14dae9d210b8)	Nessus	FreeBSD Local Security Checks	2016/8/5	2026/1/29	high
93371	SUSE SLES11 Security Update : perl (SUSE-SU-2016:2246-1)	Nessus	SuSE Local Security Checks	2016/9/8	2026/1/27	high

检测

插件搜索

critical

critical

high

high

high

high