Lucene search

K
cveMitreCVE-2005-3070
HistorySep 27, 2005 - 7:03 p.m.

CVE-2005-3070

2005-09-2719:03:00
mitre
web.nvd.nist.gov
21
hylafax
4.2.1
vulnerability
unix socket
denial of service
nvd

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:N/A:P

AI Score

6.3

Confidence

High

EPSS

0

Percentile

5.1%

HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which might allow local users to read faxes and cause a denial of service by creating the socket using the hyla.unix temporary file.

Affected configurations

Nvd
Node
hylafaxhylafaxRange4.2.1
VendorProductVersionCPE
hylafaxhylafax*cpe:2.3:a:hylafax:hylafax:*:*:*:*:*:*:*:*

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:N/A:P

AI Score

6.3

Confidence

High

EPSS

0

Percentile

5.1%