CVE-2005-4536

2005-12-31T05:00:00
ID CVE-2005-4536
Type cve
Reporter cve@mitre.org
Modified 2017-07-20T01:29:00

Description

Mail::Audit module in libmail-audit-perl 2.1-5, when logging is enabled without a default log file specified, uses predictable log filenames, which allows local users to overwrite arbitrary files via a symlink attack on the [PID]-audit.log temporary file.