CVE-2005-3070
HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which...
HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which might allow local users to read faxes and cause a denial of service by creating the socket using the hyla.unix temporary file.
Exploit likelihood
What each source reports
NVD Score used
HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which might allow local users to read faxes and cause a denial of service by creating the socket using the hyla.unix temporary file.
- Record
CVE-2005-3070- CVSS 2.0
- 3.6 Low
AV:L/AC:L/Au:N/C:P/I:N/A:P - Updated
- 2026-11-02
CVE List No score
HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which might allow local users to read faxes and cause a denial of service by creating the socket using the hyla.unix temporary file.
- Record
CVE-2005-3070- Updated
- 2026-11-02
EUVDEUVD-2005-3070 No score
HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which might allow local users to read faxes and cause a denial of service by creating the socket using the hyla.unix temporary file.
- Record
EUVD-2005-3070- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5h28-cxmq-mh2v No score
HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which...
HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which might allow local users to read faxes and cause a denial of service by creating the socket using the hyla.unix temporary file.
- Record
GHSA-5h28-cxmq-mh2v- Updated
- 2026-11-02
OSV No score
HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which might allow local users to read faxes and cause a denial of service by creating the socket using the hyla.unix temporary file.
- Record
CVE-2005-3070- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-3070 No score
HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which might allow local users to read faxes and cause a denial of service by creating the socket using the hyla.unix temporary file.
- Record
DEBIAN-CVE-2005-3070- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-3070 is a low vulnerability (CVSS 3.6) in Hylafax, published September 27, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. Fixed in hylafax 1:4.2.2+rc1.