Detections
Analytics
XMail < 1.27 Insecure Temporary File Creation
medium Nessus Network Monitor Plugin ID 5347
Synopsis
The remote SMTP server is vulnerable to a symlink attack.Description
The remote mail server is running a version of XMail earlier than 1.27. Such versions are potentially affected by a flaw that may allow an attacker with local access to the host to delete or corrupt arbitrary files, due to the application creating temporary files in an insecure manner.Solution
Upgrade to XMail 1.27 or later.See Also
http://www.xmailserver.org/ChangeLog.html#feb_25__2010_v_1_27
Plugin Details
Severity: Medium
ID: 5347
Family: SMTP Servers
Published: 3/1/2010
Updated: 3/6/2019
Nessus ID: 44942
Vulnerability Information
Patch Publication Date: 2/25/2010
Vulnerability Publication Date: 2/25/2010
Reference Information
BID: 38427