PT-2005-5214 · Perl · Libmail-Audit-Perl

Niko Tyni · Published 2005-12-31 · Updated 2017-07-20 · CVE-2005-4536

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions libmail-audit-perl version 2.1-5

Description The Mail::Audit module in libmail-audit-perl has an issue when logging is enabled without a default log file specified. It uses predictable log filenames, which allows local users to overwrite arbitrary files via a symlink attack on the temporary file.

Recommendations For libmail-audit-perl version 2.1-5, consider specifying a default log file when logging is enabled to prevent the use of predictable log filenames. As a temporary workaround, restrict access to the logging functionality to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-4536

DSA-960-3

Affected Products

Libmail-Audit-Perl

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2005-4536 · Security Note
• http://secunia.com/advisories/18652 · Vendor Advisory
• http://secunia.com/advisories/18656 · Vendor Advisory
• http://debian.org/security/2006/dsa-960 · Vendor Advisory
• http://vupen.com/english/advisories/2006/0378 · Note
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=344029 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24380 · Note
• http://securityfocus.com/bid/16434 · Note