Unscored CVE-2006-1231 EUVD-2006-1235GHSA-gxcv-wfq7-m4j4

CAPI4HylaFAX 1.3, when compiled with GENERATE_DEBUGSFFDATAFILE set, allows local users to modify arbitrary files via a symlink attack on th…

Published Mar 14, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

CAPI4HylaFAX 1.3, when compiled with GENERATE_DEBUGSFFDATAFILE set, allows local users to modify arbitrary files via a symlink attack on the c2faxrecv_dbgdatafile.sff temporary file.

References

20060307 capi4hylafax insecure manipulation with tmp files mailing-list
capi4hylafax-c2faxrecvdbgdatafile-symlink(25262) vdb-entry
17034 vdb-entry
20060307 capi4hylafax insecure manipulation with tmp files mailing-list