PatchTheCVEmailscanner vulnerabilities and fixes
Recent CVEs affecting mailscanner, with upgrade or downgrade steps. 3 tracked.
mailscanner has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2019-11-12. Highest priority: CVE-2010-3293 (score 27/100).
- CVE-2010-3293 MEDIUM 5.5 UPGRADE mailscanner can allow local users to prevent virus signatures from being updated
- CVE-2010-3292 MEDIUM 5.5 DOWNGRADE The update{_bad,}_phishing_sites scripts in mailscanner 4.79.11-2 downloads files and trusts them without usin
- CVE-2010-3095 MEDIUM 4.7 UPGRADE mailscanner before 4.79.11-2.1 might allow local users to overwrite arbitrary files via a symlink attack on ce
FAQ
How do I fix mailscanner vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mailscanner being exploited right now?
None of the tracked mailscanner CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mailscanner CVE should I patch first?
CVE-2010-3293 currently ranks highest (27/100): mailscanner can allow local users to prevent virus signatures from being updated.