Skip to content
OpenAdvisories
Unscored DSA-865-1 1 CVE

hylafax - insecure temporary files

Published Oct 13, 2005 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 3.0 hylafax 1:4.1.1-3.2
Debian · 3.1 hylafax 1:4.2.1-5sarge1

Vulnerabilities 1

  • Unscored —

    xferfaxstats in HylaFax 4.2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on the x…