CVE-2005-3069

Related Files

Debian Linux Security Advisory 865-1

Posted Oct 13, 2005

Authored by Debian | Site security.debian.org

Debian Security Advisory DSA 865-1 - Javier Fernandez-Sanguino Pena discovered that several scripts of the hylafax suite, a flexible client/server fax software, create temporary files and directories in an insecure fashion, leaving them vulnerable to symlink exploits.

tags | advisory

systems | linux, debian

advisories | CVE-2005-3069

SHA-256 | 665f9ba8756a18f91394c5b16dc16e066c6794141834ccdf4197e43263d83525

Download | Favorite | View

Mandriva Linux Security Advisory 2005.177

Posted Oct 8, 2005

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Update Advisory - faxcron, recvstats, and xferfaxstats in HylaFax 4.2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files. In addition, HylaFax has some provisional support for Unix domain sockets, which is disabled in the default compile configuration. It is suspected that a local user could create a fake /tmp/hyla.unix socket and intercept fax traffic via this socket. In testing for this vulnerability, with CONFIG_UNIXTRANSPORT disabled, it has been found that client programs correctly exit before sending any data.

tags | advisory, arbitrary, local

systems | linux, unix, mandriva

advisories | CVE-2005-3069, CVE-2005-3070

SHA-256 | 62d8e72fae9a4a68d6e24a2850d05bb819ea9695193453de5c40931f5182a02e

Download | Favorite | View