CVE-2008-5313
Published Dec 3, 2008
Last updated 14 years ago
Overview
- Description
- mailscanner 4.68.8 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files used by the (1) f-prot-autoupdate, (2) clamav-autoupdate, (3) avast-autoupdate, and (4) f-prot-6-autoupdate scripts in /etc/MailScanner/autoupdate/; the (5) bitdefender-wrapper, (6) kaspersky-wrapper, (7) clamav-wrapper, and (8) rav-wrapper scripts in /etc/MailScanner/wrapper/; the (9) Quarantine.pm, (10) TNEF.pm, (11) MessageBatch.pm, (12) WorkArea.pm, and (13) SA.pm scripts in /usr/share/MailScanner/MailScanner/; (14) /usr/sbin/MailScanner; and (15) scripts that load the /etc/MailScanner/mailscanner.conf.with.mcp configuration file.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 6.9
- Impact score
- 10
- Exploitability score
- 3.4
- Vector string
- AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-59
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mailscanner:mailscanner:4.68.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1CE4E293-D53D-4FD7-BFE4-13A23C43A2BD"
},
{
"criteria": "cpe:2.3:a:mailscanner:mailscanner:4.68.8-1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D39BFD5F-02E1-4FB3-82C1-8D96ADAC1A14"
},
{
"criteria": "cpe:2.3:a:mailscanner:mailscanner:4.69.9-3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6A7B2819-F30A-46D7-BD0A-EACAA2A1BEBC"
},
{
"criteria": "cpe:2.3:a:mailscanner:mailscanner:4.70.7-1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CE71AC0B-95B8-4D2F-B84C-47F25D8DB175"
},
{
"criteria": "cpe:2.3:a:mailscanner:mailscanner:4.71.10-1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CFB1CBCB-A139-4CB3-8D23-F5547C883A0C"
},
{
"criteria": "cpe:2.3:a:mailscanner:mailscanner:4.72.5-1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CD5C13BB-E82B-47BA-B72D-A846C2E0BB21"
},
{
"criteria": "cpe:2.3:a:mailscanner:mailscanner:4.73.4-2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6F1C65FA-CBA9-4BEE-95A8-B003F8CB85CC"
}
],
"operator": "OR"
}
]
}
]