Code execution is possible with malformed message if spamd is executed with options -v and -P.
vulners.com/securityvulns/securityvulns:doc:12993