CVE-2010-3293: Input Validation
Published Sep 11, 2010
·Updated
mailscanner can allow local users to prevent virus signatures from being updated
Affected Software
2 affected components
debian/mailscanner
mailscanner mailscanner<4.79.11-2
Event History
Sep 11, 2010
Data Sourced
via Debian·12:39 AM
SeverityAffected Software
Oct 28, 2019
CVE Published
via MITRE·02:08 PM
Data Sourced
via MITRE·02:08 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2010-3293?
CVE-2010-3293 is considered a moderate severity vulnerability.
2
How do I fix CVE-2010-3293?
To fix CVE-2010-3293, ensure that you upgrade the mailscanner package to a version higher than 4.79.11-2.
3
What does CVE-2010-3293 affect?
CVE-2010-3293 affects the mailscanner software on systems where local users can block virus signature updates.
4
Who is impacted by CVE-2010-3293?
Local users on systems with vulnerable versions of the mailscanner can be impacted by CVE-2010-3293.
5
Is there a workaround for CVE-2010-3293?
A potential workaround for CVE-2010-3293 is to restrict local user access to the mailscanner update functionality.