CVE-2005-3070: Hylafax

Low severity, CVSS 3.6. EPSS: 0.4% chance of exploitation in the next 30 days.

HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which might allow local users to read faxes and cause a denial of service by creating the socket using the hyla.unix temporary file.

Affected products

• Hylafax Hylafax: up to and including 4.2.1

Published 2005-09-27. Last modified 2026-06-16.