CVE-2008-5140: Medium severity mailscanner vulnerability
Published Nov 18, 2008
·Updated
trend-autoupdate.new in mailscanner 4.55.10 and other versions before 4.74.16-1 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/opr.ini.##### or (2) /tmp/lpt.zip temporary file.
Affected Software
1 affected component
Debian Mailscanner=4.55.10
Event History
Nov 18, 2008
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-5140?
CVE-2008-5140 is classified as a high severity vulnerability due to its potential for local users to exploit the system.
2
How do I fix CVE-2008-5140?
To fix CVE-2008-5140, upgrade to Mailscanner version 4.74.16-1 or later.
3
What type of attack does CVE-2008-5140 expose systems to?
CVE-2008-5140 exposes systems to symlink attacks that can result in overwriting arbitrary files.
4
Which Mailscanner versions are affected by CVE-2008-5140?
CVE-2008-5140 affects Mailscanner versions before 4.74.16-1, specifically including version 4.55.10.
5
Who can exploit the vulnerability in CVE-2008-5140?
Local users on the system can exploit the vulnerability in CVE-2008-5140.