CVE:CVE-2008-5313
CNNVD:CNNVD-200812-033
MailScanner是一个Email病毒扫描、防黑和垃圾邮件过滤程序。
mailscanner 4.68.8和其它4.74.16-1之前的版本可能允许本地用户可以借助的一个symlink攻击 on certain temporary files used by the 对被(1) f-prot-autoupdate, (2) clamav-autoupdate, (3) avast-autoupdate,和(4) /etc/MailScanner/autoupdate/中的f-prot-6-autoupdate脚本; (5) bitdefender-wrapper, (6) kaspersky-wrapper, (7) clamav-wrapper, and (8) /etc/MailScanner/wrapper/中的rav-wrapper脚本;(9) Quarantine.pm, (10) TNEF.pm, (11) MessageBatch.pm, (12) WorkArea.pm, 和(13) /usr/share/MailScanner/MailScanner/中的SA.pm脚本; (14) /usr/sbin/MailScanner; 以及(15)装载  /etc/MailScanner/mailscanner.conf.with.mcp配置文件的脚本所运行的临时文件发动一个symlink攻击，重写任意文件
solution:Upgrade mailscanner mailscanner to a higher version than 4.68.8,4.68.8-1,4.69.9-3,4.70.7-1,4.71.10-1,4.72.5-1,4.73.4-2,and avoid the version 4.68.8,4.68.8-1,4.69.9-3,4.70.7-1,4.71.10-1,4.72.5-1,4.73.4-2