Skip to content
OpenAdvisories
Unscored DSA-933-1 1 CVE

hylafax - arbitrary command execution

Published Jan 9, 2006 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 3.0 hylafax 4.1.1-4woody1
Debian · 3.1 hylafax 1:4.2.1-5sarge3

Vulnerabilities 1

  • Unscored —
    CVE-2005-3539 Public exploit EPSS 13%

    Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier allow remote attackers to execute arbitrary comman…