CVE-2010-3292

CVE-2010-3292 describes a vulnerability in MailScanner 4.79.11-2 where the update{_bad,}_phishing_sites scripts download configuration files without encryption or digital signature verification. This allows an attacker to replace critical files, such as the phishing whitelist, through DNS or packet spoofing. With a CVSS score of 5.5 (Medium), the vulnerability has a low attack complexity and requires local access, potentially leading to high impact on availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.