CVE-2008-5312: Mailscanner

Medium severity, CVSS 6.9. EPSS: 0.3% chance of exploitation in the next 30 days.

mailscanner 4.55.10 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files used by the (1) f-prot-autoupdate, (2) clamav-autoupdate, (3) panda-autoupdate.new, (4) trend-autoupdate.new, and (5) rav-autoupdate.new scripts in /etc/MailScanner/autoupdate/, a different vulnerability than CVE-2008-5140.

Affected products

• Mailscanner Mailscanner: version 4.55.10 only; version 4.56.8-1 only; version 4.57.7-1 only; version 4.58.9-1 only; version 4.59.4-2 only; version 4.60.8-1 only; …

Published 2008-12-03. Last modified 2026-06-16.