Skip to content
OpenAdvisories
Unscored DSA-634-1 1 CVE

hylafax - weak hostname and username validation

Published Jan 11, 2005 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.0 hylafax 1:4.1.1-3.1

Vulnerabilities 1

  • Unscored —

    hfaxd in HylaFAX before 4.2.1, when installed with a "weak" hosts.hfaxd file, allows remote attackers to authenticate a…