Lam3rZ Security Advisory #3/2004 – Confirm versions 0.62 and below allow for forged email headers to execute arbitrary code as the uid the script runs under for procmail.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/32751/Lam3rZ-032004.txt
Source: https://packetstormsecurity.com/files/32751/Lam3rZ-032004.txt.html