PT-2019-6552

CVE-2010-3095

·

Published

2019-11-12

·

Updated

2019-11-15

Description by

CVSS 2.0
3.3
Low
MetricsAV:L/AC:M/Au:N/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions MailScanner versions prior to 4.79.11-2.1
Description The issue allows local users to overwrite arbitrary files via a symlink attack on certain temporary files. This problem exists due to an incomplete fix for a previously identified issue.
Recommendations For versions prior to 4.79.11-2.1, update to version 4.79.11-2.1 or later to resolve the issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-59: Improper Link Resolution Before File Access (\'Link Following\')
Related identifiers
CVE-2010-3095
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com