Mandriva Linux Security Advisory MDKSA-2006-103 – A flaw was discovered in the way that spamd processes the virtual POP usernames passed to it. If running with the –vpopmail and –paranoid flags, it is possible for a remote user with the ability to connect to the spamd daemon to execute arbitrary commands as the user running spamd.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/47562/MDKSA-2006-103.txt
Source: https://packetstormsecurity.com/files/47562/Mandriva-Linux-Security-Advisory-2006.103.html