MailScanner Multiple Insecure Temporary Files Vulnerabilities

MailScanner is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MailScanner Multiple Insecure Temporary Files Vulnerabilities

This host is installed with MailScanner and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmailscannermultvuln.nasl 7823 2017-11-20 08:54:04Z cfischer $ MailScanner Multiple Insecure Temporary Files Vulnerabilities Authors: Sujit Ghosal Copyright: Copyright c 2008 Greenbo...

MailScanner Infinite Loop Denial of Service Vulnerability

This host is installed with MailScanner and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodmailscannerinfiniteloopdosvuln900413.nasl 7823 2017-11-20 08:54:04Z cfischer $ Description: MailScanner Infinite Loop Denial of Service Vulnerability Authors: Sujit Ghosa...

MailScanner Infinite Loop DoS Vulnerability

MailScanner is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-5313

mailscanner 4.68.8 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files used by the 1 f-prot-autoupdate, 2 clamav-autoupdate, 3 avast-autoupdate, and 4 f-prot-6-autoupdate scripts in /etc/MailScanner/autoupdate/;...

CVE-2008-5312

mailscanner 4.55.10 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files used by the 1 f-prot-autoupdate, 2 clamav-autoupdate, 3 panda-autoupdate.new, 4 trend-autoupdate.new, and 5 rav-autoupdate.new scripts in...

Design/Logic Flaw

mailscanner 4.68.8 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files used by the 1 f-prot-autoupdate, 2 clamav-autoupdate, 3 avast-autoupdate, and 4 f-prot-6-autoupdate scripts in /etc/MailScanner/autoupdate/;...

CVE-2008-5312

mailscanner 4.55.10 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files used by the 1 f-prot-autoupdate, 2 clamav-autoupdate, 3 panda-autoupdate.new, 4 trend-autoupdate.new, and 5 rav-autoupdate.new scripts in...

CVE-2008-5313

mailscanner 4.68.8 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files used by the 1 f-prot-autoupdate, 2 clamav-autoupdate, 3 avast-autoupdate, and 4 f-prot-6-autoupdate scripts in /etc/MailScanner/autoupdate/;...

Design/Logic Flaw

mailscanner 4.55.10 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files used by the 1 f-prot-autoupdate, 2 clamav-autoupdate, 3 panda-autoupdate.new, 4 trend-autoupdate.new, and 5 rav-autoupdate.new scripts in...

CVE-2008-5313

CVE-2008-5313 affects MailScanner: versions 4.68.8 and other builds before 4.74.16-1 are exploitable via a local symlink attack that can overwrite arbitrary files in several autoupdate and MailScanner script paths (e.g., /etc/MailScanner/autoupdate/, /etc/MailScanner/wrapper/, /usr/share/MailScan...

CVE-2008-5313

mailscanner 4.68.8 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files used by the 1 f-prot-autoupdate, 2 clamav-autoupdate, 3 avast-autoupdate, and 4 f-prot-6-autoupdate scripts in /etc/MailScanner/autoupdate/;...

CVE-2008-5312

CVE-2008-5312 affects MailScanner 4.55.10 and earlier; before 4.74.16-1, local users could exploit a symlink vulnerability to overwrite arbitrary files via temporary files used by autoupdate scripts (f-prot-autoupdate, clamav-autoupdate, panda-autoupdate.new, trend-autoupdate.new, rav-autoupdate....

CVE-2008-5312

mailscanner 4.55.10 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files used by the 1 f-prot-autoupdate, 2 clamav-autoupdate, 3 panda-autoupdate.new, 4 trend-autoupdate.new, and 5 rav-autoupdate.new scripts in...

MailScanner Clean()函数死循环漏洞

BUGTRAQ ID: 32514 MailScanner是邮件网关系统所使用的邮件安全和反垃圾邮件软件包。 MailScanner的Message.pm模块中的Clean函数存在安全漏洞。如果扫描到了特制的邮件消息的话，就可能触发死循环，导致耗尽大量CPU资源。 MailScanner 4 MailScanner ----------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.sng.ecs.soton.ac.uk/mailscanner...

CVE-2008-5140

trend-autoupdate.new in mailscanner 4.55.10 and other versions before 4.74.16-1 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/opr.ini. or 2 /tmp/lpt.zip temporary file...

Design/Logic Flaw

trend-autoupdate.new in mailscanner 4.55.10 and other versions before 4.74.16-1 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/opr.ini. or 2 /tmp/lpt.zip temporary file...

CVE-2008-5140

trend-autoupdate.new in mailscanner 4.55.10 and other versions before 4.74.16-1 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/opr.ini. or 2 /tmp/lpt.zip temporary file...

CVE-2008-5140

CVE-2008-5140 : MailScanner 4.55.10 and other versions before 4.74.16-1 are vulnerable to local user symlink attacks that can overwrite arbitrary files via temporary files such as /tmp/opr.ini.##### and /tmp/lpt*.zip, exposing a local-privilege risk. The underlying issue is a symlink-based overwr...

CVE-2008-5140

trend-autoupdate.new in mailscanner 4.55.10 and other versions before 4.74.16-1 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/opr.ini. or 2 /tmp/lpt.zip temporary file...