http://bugzilla.spamassassin.org/show_bug.cgi?id=4041
Summary: Users can load plugins
Product: Spamassassin
Version: unspecified
Platform: All
OS/Version: other
Status: NEW
Severity: normal
Priority: P5
Component: Plugins
AssignedTo: [email protected]
ReportedBy: [EMAIL PROTECTED]
Calling loadplugin from user_prefs works despite the documentation which
suggests that it should not. It is listed under 'Administrator Settings' in the
manpage for Mail::SpamAssassin::Conf. Additionally, this could be a source of
security problems - allowing users to execute unsafe code.
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
