CVE-2008-5140: Debian Mailscanner

Medium severity, CVSS 6.9. EPSS: 0.3% chance of exploitation in the next 30 days.

trend-autoupdate.new in mailscanner 4.55.10 and other versions before 4.74.16-1 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/opr.ini.##### or (2) /tmp/lpt*.zip temporary file.

Affected products

• Debian Mailscanner: version 4.55.10 only

Published 2008-11-18. Last modified 2026-06-16.