Secunia

Gentoo has issued updates to Mail-SpamAssasin. These fix a vulnerability, which can be exploited by hackers to compromise a vulnerable system.

The problem is, that the program spamc in Mail-SpamAssassin contains a off-by-one bug when escaping '.' at the beginning of lines. This can be exploited by sending a specially crafted email, which causes the stack frame address to be overwritten and thereby making execution of arbitrary code on the system possible.

The vulnerability is only exploitable on some systems. Succesfull exploitation requires that spamc is running in BSMTP mode (-B option).

Solution
Update Gentoo:
Further details available in Customer Area

Deep Links
Links available in Customer Area