Lucene search
HistoryNov 18, 2008 - 4:00 p.m.
CVE-2008-5140
CVSS2
6.9
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
AI Score
6.1
Confidence
Low
EPSS
0
Percentile
5.1%
trend-autoupdate.new in mailscanner 4.55.10 and other versions before 4.74.16-1 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/opr.ini.##### or (2) /tmp/lpt*.zip temporary file.
Affected configurations
Node
debianmailscannerMatch4.55.10
| Vendor | Product | Version | CPE |
|---|---|---|---|
| debian | mailscanner | 4.55.10 | cpe:2.3:a:debian:mailscanner:4.55.10:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2008-5140
2008-11-18 16:00:01
CVE-2008-5312
2008-12-03 17:30:00
ubuntucve
ubuntucve
CVE-2008-5140
2008-11-18 00:00:00
CVE-2008-5312
2008-12-03 00:00:00
prion
prion
Design/Logic Flaw
2008-11-18 16:00:00
Design/Logic Flaw
2008-12-03 17:30:00
cvelist
cvelist
CVE-2008-5140
2008-11-18 15:00:00
CVE-2008-5312
2008-12-03 17:00:00
nvd
nvd
CVE-2008-5312
2008-12-03 17:30:00
securityvulns
securityvulns
mailscanner symbolic links vulnerability
2008-12-23 00:00:00
[ MDVA-2008:241 ] mailscanner
2008-12-23 00:00:00
openvas
openvas
Ubuntu USN-697-1 (imlib2)
2008-12-29 00:00:00
Ubuntu USN-698-2 (nagios3)
2008-12-29 00:00:00
Ubuntu USN-699-1 (blender)
2008-12-29 00:00:00
CVSS2
6.9
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
AI Score
6.1
Confidence
Low
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2008-5140