CVE-2010-3095 mailscanner before 4.79.11-2.1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files. NOTE: this issue exists because of an incomplete fix for CVE-2008-5...
MediumCVSS 4.7
EPSS 0.34%
- Published
- Updated
- Exploit status
- No public exploit known
Description
mailscanner before 4.79.11-2.1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files. NOTE: this issue exists because of an incomplete fix for CVE-2008-5313.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mailscanner | < 4.79.11-2.1 | 4.79.11-2.1 |
| mailscanner | = before 4.79.11-2.1 | No fix listed |
References
- access.redhat.com broken-link
- bugs.debian.org mailing-list third-party-advisory
- security-tracker.debian.org third-party-advisory
- [oss-security] 20100913 Re: CVE request: mailscanner, multiple vulnerabilities mailing-list third-party-advisory