Lucene search
HistoryNov 18, 2008 - 4:00 p.m.
CVE-2008-5140
cve-2008-5140
mailscanner
symlink attack
vulnerability
file overwrite
nvd
6 Medium
AI Score
Confidence
Low
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.2%
trend-autoupdate.new in mailscanner 4.55.10 and other versions before 4.74.16-1 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/opr.ini.##### or (2) /tmp/lpt*.zip temporary file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian:mailscanner | debian mailscanner | eq | 4.55.10 |
Related
prion
prion
Design/Logic Flaw
2008-11-18 16:00:00
Design/Logic Flaw
2008-12-03 17:30:00
ubuntucve
ubuntucve
CVE-2008-5140
2008-11-18 00:00:00
CVE-2008-5312
2008-12-03 00:00:00
cve
cve
CVE-2008-5312
2008-12-03 17:30:00
securityvulns
securityvulns
mailscanner symbolic links vulnerability
2008-12-23 00:00:00
[ MDVA-2008:241 ] mailscanner
2008-12-23 00:00:00
openvas
openvas
Ubuntu USN-697-1 (imlib2)
2008-12-29 00:00:00
Ubuntu USN-698-2 (nagios3)
2008-12-29 00:00:00
Ubuntu USN-699-1 (blender)
2008-12-29 00:00:00
6 Medium
AI Score
Confidence
Low
6.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2008-5140