Debian Security Advisory 690-1 – Bastian Blank found a vulnerability in bsmtpd, a batched SMTP mailer for sendmail and postfix. Unsanitized addresses can cause the execution of arbitrary commands during alleged mail delivery.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/36342/dsa-690.txt
Source: https://packetstormsecurity.com/files/36342/dsa-690.txt.html