MailScanner 'update_virus_scanners' Insecure Lock File Scanner Bypass Vulnerability

Bugtraq ID:	43178
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Sep 10 2010 12:00AM
Updated:	Sep 10 2010 12:00AM
Credit:	Raphael Geissert
Vulnerable:	MailScanner MailScanner 4.79.11
Not Vulnerable:

MailScanner 'update_virus_scanners' Insecure Lock File Scanner Bypass Vulnerability

MailScanner is prone to a security vulnerability because its mechanism to update virus scanners can be bypassed.

A successful attack can allow local attackers to bypass file scans with current virus signatures, giving users a false sense of security. This may aid in launching further attacks.

MailScanner 4.79.11 is vulnerable; other versions may also be affected.

MailScanner 'update_virus_scanners' Insecure Lock File Scanner Bypass Vulnerability

Local attackers can use readily available tools to exploit this issue.

MailScanner 'update_virus_scanners' Insecure Lock File Scanner Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

MailScanner 'update_virus_scanners' Insecure Lock File Scanner Bypass Vulnerability

References:

• #596397 mailscanner: local users may prevent virus signatures from being updated (Raphael Geissert)
  
• MailScanner Homepage (MailScanner)