hylafax

11 results · Feed

• Unscored —
  CVE-2020-15396

  In HylaFAX+ through 7.0.2 and HylaFAX Enterprise, the faxsetup utility calls chown on files in user-owned directories. …

  hylafax hylafax hylafaxplus Debian Ubuntu Alpine
  Jun 30, 2020
• Unscored —
  CVE-2018-17141

  HylaFAX 6.0.6 and HylaFAX+ 5.6.0 allow remote attackers to execute arbitrary code via a dial-in session that provides a…

  hylafax hylafax hylafax Debian Ubuntu Alpine
  Sep 21, 2018
• Unscored —
  CVE-2005-3538

  hfaxd in HylaFAX 4.2.3, when PAM support is disabled, accepts arbitrary passwords, which allows remote attackers to gai…

  hylafax Debian
  Jan 6, 2006
• Unscored —
  CVE-2005-3539 Public exploit EPSS 13%

  Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier allow remote attackers to execute arbitrary comman…

  hylafax Debian
  Jan 6, 2006
• Unscored —
  CVE-2005-3070

  HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which might allow local users …

  hylafax Debian
  Sep 27, 2005
• Unscored —
  CVE-2005-3069

  xferfaxstats in HylaFax 4.2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on the x…

  hylafax Debian
  Sep 27, 2005
• Unscored —
  CVE-2004-1182

  hfaxd in HylaFAX before 4.2.1, when installed with a "weak" hosts.hfaxd file, allows remote attackers to authenticate a…

  hylafax Debian
  Jan 19, 2005
• Unscored —
  CVE-2003-0886 Public exploit EPSS 13%

  Format string vulnerability in hfaxd for Hylafax 4.1.7 and earlier allows remote attackers to execute arbitrary code.

  hylafax Debian
  Nov 12, 2003
• Unscored —
  CVE-2002-1050

  Buffer overflow in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service, and possibly exe…

  hylafax Debian
  Apr 2, 2003
• Unscored —
  CVE-2002-1049

  Format string vulnerability in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service (cras…

  hylafax Debian
  Apr 2, 2003
• Unscored —
  CVE-2001-1034

  Format string vulnerability in Hylafax on FreeBSD allows local users to execute arbitrary code via format specifiers in…

  hylafax Debian
  Feb 2, 2002