Subject: BSA-007 Security Update for mailscanner

Jan Wagner uploaded new packages for mailscanner which fixed the following security problems: CVE-2010-3095 incomplete fix for CVE-2008-5313 https://vulners.com/cve/CVE-2010-3095 The original text of CVE-2008-5313: mailscanner 4.68.8 and other versions before 4.74.16-1 might allow local users to...

Directory traversal

Directory traversal vulnerability in docs.php in MailWatch for MailScanner 1.0.4 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the doc parameter...

CVE-2008-5991

Directory traversal vulnerability in docs.php in MailWatch for MailScanner 1.0.4 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the doc parameter...

CVE-2008-5991

Directory traversal vulnerability in docs.php in MailWatch for MailScanner 1.0.4 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the doc parameter...

CVE-2008-5991

MailWatch for MailScanner (versions up to 1.0.4 and earlier) contains a directory traversal vulnerability in docs.php that allows remote attackers to include and execute arbitrary local files by supplying a .. in the doc parameter. This is a local file inclusion risk that can lead to code executi...

CVE-2008-5991: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in docs.php in MailWatch for MailScanner 1.0.4 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the doc parameter...

[ MDVA-2008:241 ] mailscanner

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVA-2008:241 http://www.mandriva.com/security/ Package : mailscanner Date : December 22, 2008 Affected: Corporate 4.0 Problem Description: Local users can use symlink attacks throughout a flaw on trend-autoupdate scri...

mailscanner symbolic links vulnerability

Multiple symlink vulnerabilities in different scripts...

MailScanner Multiple Insecure Temporary Files Vulnerabilities

This host is installed with MailScanner and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmailscannermultvuln.nasl 7823 2017-11-20 08:54:04Z cfischer $ MailScanner Multiple Insecure Temporary Files Vulnerabilities Authors: Sujit Ghosal Copyright: Copyright c 2008 Greenbo...

MailScanner Multiple Insecure Temporary Files Vulnerabilities

MailScanner is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MailScanner Infinite Loop Denial of Service Vulnerability

This host is installed with MailScanner and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodmailscannerinfiniteloopdosvuln900413.nasl 7823 2017-11-20 08:54:04Z cfischer $ Description: MailScanner Infinite Loop Denial of Service Vulnerability Authors: Sujit Ghosa...

MailScanner Infinite Loop DoS Vulnerability

MailScanner is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-5312

mailscanner 4.55.10 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files used by the 1 f-prot-autoupdate, 2 clamav-autoupdate, 3 panda-autoupdate.new, 4 trend-autoupdate.new, and 5 rav-autoupdate.new scripts in...

CVE-2008-5313

mailscanner 4.68.8 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files used by the 1 f-prot-autoupdate, 2 clamav-autoupdate, 3 avast-autoupdate, and 4 f-prot-6-autoupdate scripts in /etc/MailScanner/autoupdate/;...

Design/Logic Flaw

mailscanner 4.55.10 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files used by the 1 f-prot-autoupdate, 2 clamav-autoupdate, 3 panda-autoupdate.new, 4 trend-autoupdate.new, and 5 rav-autoupdate.new scripts in...

CVE-2008-5313

mailscanner 4.68.8 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files used by the 1 f-prot-autoupdate, 2 clamav-autoupdate, 3 avast-autoupdate, and 4 f-prot-6-autoupdate scripts in /etc/MailScanner/autoupdate/;...

CVE-2008-5312

mailscanner 4.55.10 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files used by the 1 f-prot-autoupdate, 2 clamav-autoupdate, 3 panda-autoupdate.new, 4 trend-autoupdate.new, and 5 rav-autoupdate.new scripts in...

Design/Logic Flaw

mailscanner 4.68.8 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files used by the 1 f-prot-autoupdate, 2 clamav-autoupdate, 3 avast-autoupdate, and 4 f-prot-6-autoupdate scripts in /etc/MailScanner/autoupdate/;...

CVE-2008-5313

CVE-2008-5313 affects MailScanner: versions 4.68.8 and other builds before 4.74.16-1 are exploitable via a local symlink attack that can overwrite arbitrary files in several autoupdate and MailScanner script paths (e.g., /etc/MailScanner/autoupdate/, /etc/MailScanner/wrapper/, /usr/share/MailScan...

CVE-2008-5312

CVE-2008-5312 affects MailScanner 4.55.10 and earlier; before 4.74.16-1, local users could exploit a symlink vulnerability to overwrite arbitrary files via temporary files used by autoupdate scripts (f-prot-autoupdate, clamav-autoupdate, panda-autoupdate.new, trend-autoupdate.new, rav-autoupdate....