SpamTitan CVE-2019-6800: Unencrypted Update MITM Injection RCE

Key Information Vulnerability Details CVE ID: CVE-2019-6800 Vulnerability Description: A vulnerability discovered in the anti-spam solution "SpamTitan" that allows a network man-in-the-middle attacker to execute arbitrary code with root privileges. Affected Versions: At least versions 7.x through 7.03. Discovery Discovery Method: An unencrypted download of a shell script triggered an alert on a network monitoring device. This traffic was part of the anti-spam rule update process. HTTP Response Security Risks The update process executes over an unencrypted connection with no security safeguards. Simple man-in-the-middle attacks can inject malicious code, leading to arbitrary command execution on the SpamTitan server with root privileges. Mitigation Upgrade SpamTitan to version 7.04 or disable the anti-spam rule update process. Timeline 2019-01-23: Vulnerability confirmed. No public security contact found; email sent to publicly listed info address. 2019-01-25: Sales representative contacted for trial product, assisted in connecting with appropriate personnel for vulnerability disclosure. 2019-02-01: Ineffective mitigation (server-side redirect to HTTPS). 2019-02-14: Confirmed that effective fix would be implemented in the next update. 2019-03-11: Version 7.04 released, including the patch. 2019-06-02: Public disclosure.

Goal Reached Thanks to every supporter — we hit 100%!

SpamTitan CVE-2019-6800: Unencrypted Update MITM Injection RCE