Security Advisory

CVE-2005-4536

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2006-02-01 22:00:00

Last updated 2024-08-07 23:46:05

Assigner debian

State PUBLISHED

Description

Mail::Audit module in libmail-audit-perl 2.1-5, when logging is enabled without a default log file specified, uses predictable log filenames, which allows local users to overwrite arbitrary files via a symlink attack on the [PID]-audit.log temporary file.

← Browse all CVEs View on cve.org ↗