CVE-2005-3070: Low severity hylafax hylafax vulnerability
Published Sep 27, 2005
·Updated
HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which might allow local users to read faxes and cause a denial of service by creating the socket using the hyla.unix temporary file.
Affected Software
1 affected component
Hylafax HylaFAX<=4.2.1
Event History
Sep 27, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-3070?
CVE-2005-3070 is classified as a medium severity vulnerability due to potential local user exploitation.
2
How do I fix CVE-2005-3070?
To fix CVE-2005-3070, upgrade HylaFax to version 4.2.2 or later where ownership of the UNIX domain socket is properly handled.
3
Who is affected by CVE-2005-3070?
CVE-2005-3070 affects HylaFax versions 4.2.1 and earlier.
4
What are the potential consequences of CVE-2005-3070?
The potential consequences of CVE-2005-3070 include unauthorized access to fax contents and potential denial of service.
5
Is CVE-2005-3070 a local or remote vulnerability?
CVE-2005-3070 is a local vulnerability that requires an authenticated user to exploit.