This host is installed with MailScanner and is prone to multiple vulnerabilities.

Successful exploitation will let the attacker execute arbitrary codes in the context of the application and can compromise a vulnerable system.

Upgrade to the latest MailScanner version 4.74.7-2 or later http://www.mailscanner.info/downloads.html

The flaws are due to, - Several autoupdate scripts for f-prot-autoupdate, clamav-autoupdate, panda-autoupdate, trend-autoupdate, bitdefender-wrapper, kaspersky-wrapper etc. use temporary files in an insecure manner. - The SpamAssassin and TNEF handlers use temporary files in an insecure manner. These can be exploited to affects local users to overwrite arbitrary files via symlink attacks.

MailScanner version prior to 4.74.7-2 on Linux.

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506353
• http://secunia.com/advisories/33117/
• http://www.openwall.com/lists/oss-security/2008/11/29/1

---

Updated on 2017-03-28