CVE-2010-1132

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-03-27 · updated 2026-06-16
Weakness: CWE-78

Description

The mlfi_envrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacters in the RCPT TO field of an email message.

Affected products

Georg Greve Spamassassin Milter Plugin: 0.3.1

References

http://archives.neohapsis.com/archives/fulldisclosure/2010-03/0139.html
http://bugs.debian.org/573228
http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038535.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038572.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038777.html
http://osvdb.org/62809
http://secunia.com/advisories/38840
http://secunia.com/advisories/38956
http://secunia.com/advisories/39265
http://www.debian.org/security/2010/dsa-2021
http://www.exploit-db.com/exploits/11662
http://www.securityfocus.com/bid/38578

Get alerted when CVE-2010-1132 or the next vulnerability affects your stack