high7.5
CVE-2019-6800
In TitanHQ SpamTitan through 7.03, a vulnerability exists in the spam rule update function.
Impact
In TitanHQ SpamTitan through 7.03, a vulnerability exists in the spam rule update function. Updates are downloaded over HTTP, including scripts which are subsequently executed with root permissions. An attacker with a privileged network position is trivially able to inject arbitrary commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Titanhq | Spamtitan | from 7.00 through 7.03 |