Plesk Milter (Postfix) Plugin 'mlfi_envrcpt()' Remote Arbitrary Command Injection

[RudiH]

Hi,

Running Ubuntu 10.04.4 and Plesk 11.0.9 Update #32 - Postfix: and have and issue with the milter where arbitrary commands can be run on the server as per exploit: CVE-2010-1132 http://archives.neohapsis.com/archives/fulldisclosure/2010-03/0139.html

I have not been able to resolve the issue unless I switch to qmail? Help?

Thanks,