CVE-2005-4536

Mail::Audit module in libmail-audit-perl 2.1-5, when logging is enabled without a default log file specified, uses predictable log filenames, which allows…

published February 1, 2006

CVSS
—
EPSS
0%
Percentile
28.5
In the wild
Unconfirmed
What it is

Mail::Audit module in libmail-audit-perl 2.1-5, when logging is enabled without a default log file specified, uses predictable log filenames, which allows local users to overwrite arbitrary files via a symlink attack on the [PID]-audit.log temporary file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00362 · 28.5th percentile
Published
2006-02-01T22:00Z
EPSS history
Timeline
  • 01 FEB 22:00Z
    Mail::Audit module in libmail-audit-perl 2.1-5, when logging is enabled without a default log file specified, uses predictable log filenames, which allows…
    cvelistv5