Mandriva Linux Security Update Advisory – faxcron, recvstats, and xferfaxstats in HylaFax 4.2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files. In addition, HylaFax has some provisional support for Unix domain sockets, which is disabled in the default compile configuration. It is suspected that a local user could create a fake /tmp/hyla.unix socket and intercept fax traffic via this socket. In testing for this vulnerability, with CONFIG_UNIXTRANSPORT disabled, it has been found that client programs correctly exit before sending any data.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/40517/MDKSA-2005-177.txt
Source: https://packetstormsecurity.com/files/40517/Mandriva-Linux-Security-Advisory-2005.177.html