Lucene search
HistorySep 27, 2005 - 7:03 p.m.
CVE-2005-3070
hylafax
4.2.1
vulnerability
unix socket
denial of service
nvd
6.5 Medium
AI Score
Confidence
Low
3.6 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:N/A:P
0.0004 Low
EPSS
Percentile
5.3%
HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which might allow local users to read faxes and cause a denial of service by creating the socket using the hyla.unix temporary file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| hylafax:hylafax | hylafax | le | 4.2.1 |
Related
debiancve
debiancve
CVE-2005-3070
2005-09-27 19:03:00
ubuntucve
ubuntucve
CVE-2005-3070
2005-09-27 00:00:00
nessus
nessus
Mandrake Linux Security Advisory : hylafax (MDKSA-2005:177)
2005-10-11 00:00:00
6.5 Medium
AI Score
Confidence
Low
3.6 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:N/A:P
0.0004 Low
EPSS
Percentile
5.3%
Related for CVE-2005-3070