QwikSec

Security Database

CVE

CWE

Training

CVE-2008-5312

Published: Dec 3, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

mailscanner 4.55.10 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files used by the (1) f-prot-autoupdate, (2) clamav-autoupdate, (3) panda-autoupdate.new, (4) trend-autoupdate.new, and (5) rav-autoupdate.new scripts in /etc/MailScanner/autoupdate/, a different vulnerability than CVE-2008-5140.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506353#44

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

[oss-security] 20081128 CVE id request/update: mailscanner: many scripts allow local users to overwrite arbitrary files via symlink attacks

mailing-list

x_refsource_MLIST

third-party-advisory

x_refsource_SECUNIA

http://www.mailscanner.info/ChangeLog

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.