CVE-2005-3070

CVE-2005-3070 describes a vulnerability in HylaFax 4.2.1 and earlier, where the fax server fails to properly create or verify ownership of its UNIX domain socket. This flaw allows local users to create a malicious socket using the "hyla.unix" temporary file, potentially leading to unauthorized reading of faxes and a denial of service. With a CVSS score of 3.6 (AV:L/AC:L/Au:N/C:P/I:N/A:P), this vulnerability requires local access and low attack complexity to achieve partial confidentiality and availability impacts. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.