Test ID:	1.3.6.1.4.1.25623.1.0.800206
Category:	General
Title:	MailScanner Multiple Insecure Temporary Files Vulnerabilities
Summary:	MailScanner is prone to multiple vulnerabilities.
Description:	Summary: MailScanner is prone to multiple vulnerabilities. Vulnerability Insight: The flaws are due to: - Several autoupdate scripts for f-prot-autoupdate, clamav-autoupdate, panda-autoupdate, trend-autoupdate, bitdefender-wrapper, kaspersky-wrapper etc. use temporary files in an insecure manner. - The SpamAssassin and TNEF handlers use temporary files in an insecure manner. These can be exploited to affects local users to overwrite arbitrary files via symlink attacks. Vulnerability Impact: Successful exploitation will let the attacker execute arbitrary codes in the context of the application and can compromise a vulnerable system. Affected Software/OS: MailScanner version prior to 4.74.7-2 on Linux. Solution: Upgrade to the latest MailScanner version 4.74.7-2 or later. CVSS Score: 6.9 CVSS Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-5312 BugTraq ID: 32557 http://www.securityfocus.com/bid/32557 http://www.openwall.com/lists/oss-security/2008/11/29/1 http://secunia.com/advisories/33117 Common Vulnerability Exposure (CVE) ID: CVE-2008-5313
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.