On Tue, 2007-08-28 at 11:09 +0000, Richard Hobbs wrote:
> We are running SpamAssassin version 3.1.7-deb running on Perl version
> 5.8.4 on a Debian Sarge box with exim4.
<snip>
I would surmise that you'd get more (and more accurate) answers asking
this question on the relevant package list for your distro, or asking
the question on a SpamAssassin mailing list!
Anyway, this is probably your problem:
http://spamassassin.apache.org/advisories/cve-2007-0451.txt
Upgrade to 3.1.8 if you can.
Graeme