CVE-2003-1557
EPSS 10.9%
Description
Off-by-one buffer overflow in spamc of SpamAssassin 2.40 through 2.43, when using BSMTP mode ("-B"), allows remote attackers to execute arbitrary code via email containing headers with leading "." characters.
How to fix CVE-2003-1557
To remediate CVE-2003-1557, upgrade the affected package to a fixed version below.
- Debian/spamassassin—upgrade to 3.1.7-2 or later
Is CVE-2003-1557 being exploited?
Moderate — EPSS is 10.9%. Track this CVE but it's not at the top of the prioritisation list.
Affected packages (1)
- from 0, < 3.1.7-2