https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2010-3292.htmlhttps://patchthecve.com/cve/CVE-2010-3292.htmlTue, 16 Jun 2026 23:22:31 +0000MEDIUM 5.5: The update{_bad,}_phishing_sites scripts in mailscanner 4.79.11-2 downloads files and trusts them without using encryption (e.g., https) or digital signature checking which could allow an attacker to replace certain configuration files (e.g., phishing whitelist) via dns/packet spoofing.https://patchthecve.com/cve/CVE-2010-3095.htmlhttps://patchthecve.com/cve/CVE-2010-3095.htmlTue, 16 Jun 2026 23:22:07 +0000MEDIUM 4.7: mailscanner before 4.79.11-2.1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files. NOTE: this issue exists because of an incomplete fix for CVE-2008-5313.https://patchthecve.com/cve/CVE-2010-3293.htmlhttps://patchthecve.com/cve/CVE-2010-3293.htmlTue, 16 Jun 2026 23:22:31 +0000MEDIUM 5.5: mailscanner can allow local users to prevent virus signatures from being updated