CVE-2008-5313
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2008-5313
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
mailscanner 4.68.8 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files used by the (1) f-prot-autoupdate, (2) clamav-autoupdate, (3) avast-autoupdate, and (4) f-prot-6-autoupdate scripts in /etc/MailScanner/autoupdate/; the (5) bitdefender-wrapper, (6) kaspersky-wrapper, (7) clamav-wrapper, and (8) rav-wrapper scripts in /etc/MailScanner/wrapper/; the (9) Quarantine.pm, (10) TNEF.pm, (11) MessageBatch.pm, (12) WorkArea.pm, and (13) SA.pm scripts in /usr/share/MailScanner/MailScanner/; (14) /usr/sbin/MailScanner; and (15) scripts that load the /etc/MailScanner/mailscanner.conf.with.mcp configuration file.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
MailScanner 不安全临时文件创建漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
MailScanner是一个Email病毒扫描、防黑和垃圾邮件过滤程序。 mailscanner 4.68.8和其它4.74.16-1之前的版本可能允许本地用户可以借助的一个symlink攻击 on certain temporary files used by the 对被(1) f-prot-autoupdate, (2) clamav-autoupdate, (3) avast-autoupdate,和(4) /etc/MailScanner/autoupdate/中的f-prot-6-autoup
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2008-5313
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2008-5313
请登录查看更多情报信息。
- http://www.mailscanner.info/ChangeLogx_refsource_CONFIRM
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506353#44x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2008-5313
Same Patch Batch · n/a · 2008-12-03 · 17 CVEs total
| CVE-2008-5320 | e107 CMS 'ue[]' 参数SQL注入漏洞 | |
| CVE-2008-5321 | XOOPS GesGaleri index.php SQL注入漏洞 | |
| CVE-2008-5322 | Wysi Wiki Wyg index.php信息泄露漏洞 | |
| CVE-2008-5323 | Wysi Wiki Wyg 'index.php' 跨站脚本攻击漏洞 | |
| CVE-2008-5080 | AWStats 跨站脚本漏洞 | |
| CVE-2008-5318 | Tiki Wiki安全漏洞 | |
| CVE-2008-5319 | Tikiwiki tiki-error.php未明漏洞 | |
| CVE-2008-3057 | Octeth Oempro cookie劫持漏洞 | |
| CVE-2008-3058 | Octeth Oempro 多个SQL注入漏洞 | |
| CVE-2008-3059 | Octeth Oempro密码信息泄露漏洞 | |
| CVE-2008-5276 | VLC Real解码器堆溢出漏洞 | |
| CVE-2008-5312 | MailScanner 不安全临时文件创建漏洞 | |
| CVE-2008-5314 | ClamAV cli_check_jpeg_exploit函数畸形JPEG文件拒绝服务漏洞 | |
| CVE-2008-5315 | Apple iPhone Configuration Web Utility for windows目录遍历漏洞 | |
| CVE-2008-5316 | Little CMS ReadEmbeddedTextTag 缓冲区溢出和整数值有符号漏洞 | |
| CVE-2008-5317 | Little CMS cmsAllocGamma 缓冲区溢出和整数值有符号漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2008-5313
No comments yet