Vulnerability in Debian Libmail-Audit-Perl
CVE-2005-4536
Mail::Audit module in libmail-audit-perl 2.1-5, when logging is enabled without a default log file specified, uses predictable log filenames, which allows local users to overwrite arbitrary files via a symlink attack on the [PID]-audit.log temporary file.
EPSS: 0.004 (28.8th percentile) — read the EPSS interpretation.
Affected products
- Debian Libmail-audit-perl — versions 2.1-5
- N/a — versions n/a
References
- security@debian.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- security@debian.org (x_refsource_CONFIRM)
- security@debian.org (vendor-advisory, x_refsource_DEBIAN, Vendor Advisory)
- security@debian.org (vdb-entry, x_refsource_VUPEN)
- security@debian.org (vdb-entry, x_refsource_BID)
- security@debian.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- security@debian.org (vdb-entry, x_refsource_XF)