CVE-2005-4536

Mail::Audit module in libmail-audit-perl 2.1-5, when logging is enabled without a default log...

2.1 LowFix available

Mail::Audit module in libmail-audit-perl 2.1-5, when logging is enabled without a default log file specified, uses predictable log filenames, which allows local users to overwrite arbitrary files via a symlink attack on the [PID]-audit.log temporary file.

Exploit likelihood

0.36%Down 0.7 points since Feb 4, 2022

What each source reports

NVD Score used 2.1

Record: CVE-2005-4536
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:N/I:P/A:N
Updated: 2026-11-02

CVE List No score

Record: CVE-2005-4536
Updated: 2026-11-02

EUVDEUVD-2005-4531 No score

Record: EUVD-2005-4531
Updated: 2026-11-03

GitHub AdvisoriesGHSA-h7vp-qvfw-h2f3 No score

Mail::Audit module in libmail-audit-perl 2.1-5, when logging is enabled without a default log...

Record: GHSA-h7vp-qvfw-h2f3
Updated: 2026-11-02

Affected products

debian libmail-audit-perl

Affected packages

Affected packages
Package	Affected	Fixed
`libmail-audit-perl` Debian:3.0	before 2.0-4woody3, plus listed versions 2.0-42.0-4woody12.0-4woody2	2.0-4woody3
`libmail-audit-perl` Debian:3.1	before 2.1-5sarge4, plus listed versions 2.1-52.1-5sarge12.1-5sarge22.1-5sarge3	2.1-5sarge4

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-4536 is a low vulnerability (CVSS 2.1) in Debian Libmail-audit-perl, published December 31, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. Fixed in libmail-audit-perl 2.0-4woody3.