GCVE - cpe:2.3:a:mailscanner:mailscanner:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mailscanner:mailscanner:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Mailscanner (`af5737e7-dae0-5f46-8d1c-1978b3728b66`)
Product	Mailscanner (`9fa02bbc-fa96-56ff-b1ea-7742d4d4c1fd`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/mailscanner/v4`	purl2cpe	2026-06-01 10:15:28.669718
`pkg:github/mailscanner/v5`	purl2cpe	2026-06-01 10:15:28.669719

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-3293`	vulnerable	2026-06-08 04:55:14.022070	db.gcve.eu details are currently unavailable. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3292`	vulnerable	2026-06-08 04:55:14.020736	Details available The update{_bad,}_phishing_sites scripts in mailscanner 4.79.11-2 downloads files and trusts them without using encryption (e.g., https) or digital signature checking which could allow an attacker to replace certain configuration files (e.g., phishing whitelist) via dns/packet spoofing. Published: 2019-11-12T20:37:57.000Z Updated: 2024-08-07T03:03:18.920Z Open on db.gcve.eu Reference links https://security-tracker.debian.org/tracker/CVE-2010-3292 https://access.redhat.com/security/cve/cve-2010-3292 https://www.openwall.com/lists/oss-security/2010/09/13/9 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=596396	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3095`	vulnerable	2026-06-08 04:55:12.702126	Details available mailscanner before 4.79.11-2.1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files. NOTE: this issue exists because of an incomplete fix for CVE-2008-5313. Published: 2019-11-12T20:24:45.000Z Updated: 2024-08-07T02:55:46.806Z Open on db.gcve.eu Reference links https://security-tracker.debian.org/tracker/CVE-2010-3095 https://access.redhat.com/security/cve/cve-2010-3095 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=596403 https://www.openwall.com/lists/oss-security/2010/09/13/9	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5991`	not_vulnerable	2026-06-08 04:50:53.735783	Details available Directory traversal vulnerability in docs.php in MailWatch for MailScanner 1.0.4 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the doc parameter. Published: 2009-01-28T15:00:00.000Z Updated: 2024-08-07T11:13:13.700Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/31378 https://www.exploit-db.com/exploits/6552 http://secunia.com/advisories/31994 https://exchange.xforce.ibmcloud.com/vulnerabilities/45393	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-1706`	vulnerable	2026-06-08 04:48:27.236800	Details available Unknown vulnerability in MailScanner 4.41.3 and earlier, related to "incomplete reporting of viruses in zip files," allows remote attackers to bypass virus detection. Published: 2005-05-24T04:00:00.000Z Updated: 2024-09-17T03:52:46.955Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1014024 http://www.sng.ecs.soton.ac.uk/mailscanner/ChangeLog	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-2228`	vulnerable	2026-06-08 04:47:19.466076	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Mailscanner

Notes

PURL mappings

Vulnerability references

Contribute