CVE-2010-3292
The update{_bad,}_phishing_sites scripts in mailscanner 4.79.11-2 downloads files and trusts them without using encryption (e.g., https) or digital signature checking which coul…
Published: 2019-11-12 · CVSS: Unscored
The update{_bad,}_phishing_sites scripts in mailscanner 4.79.11-2 downloads files and trusts them without using encryption (e.g., https) or digital signature checking which could allow an attacker to replace certain configuration files (e.g., phishing whitelist) via dns/packet spoofing.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7