Description
trend-autoupdate.new in mailscanner 4.55.10 and other versions before 4.74.16-1 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/opr.ini.##### or (2) /tmp/lpt*.zip temporary file.
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506353#44
- 33117 third-party-advisory
- 32730 third-party-advisory
- mailscanner-trendautoupdatenew-symlink(46725) vdb-entry
- [debian-devel] 20080811 Re: Possible mass bug filing: The possibility of attack with the help of symlinks in some Debian packages mailing-list
- http://www.mailscanner.info/ChangeLog
- 32376 vdb-entry