CVE-2005-4536
Publication date 31 December 2005
Last updated 17 July 2025
Ubuntu priority
Description
Mail::Audit module in libmail-audit-perl 2.1-5, when logging is enabled without a default log file specified, uses predictable log filenames, which allows local users to overwrite arbitrary files via a symlink attack on the [PID]-audit.log temporary file.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| libmail-audit-perl | ||