EUVD-2006-1235

Malware in sbrugna...

SUSE CVE-2006-1231

CAPI4HylaFAX 1.3, when compiled with GENERATEDEBUGSFFDATAFILE set, allows local users to modify arbitrary files via a symlink attack on the c2faxrecvdbgdatafile.sff temporary file...

SUSE CVE-2006-3126

c2faxrecv in capi4hylafax 01.02.03 allows remote attackers to execute arbitrary commands via null \0 and shell metacharacters in the TSI string, as demonstrated by a fax from an anonymous number...

Gentoo Security Advisory GLSA 200610-05 (capi4hylafax)

The remote host is missing updates announced in advisory GLSA 200610-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200610-05 (capi4hylafax)

The remote host is missing updates announced in advisory GLSA 200610-05. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1165-1 (capi4hylafax)

The remote host is missing an update to capi4hylafax announced via advisory DSA 1165-1. Lionel Elie Mamane discovered a security vulnerability in capi4hylafax, tools for faxing over a CAPI 2.0 device, that allows remote attackers to execute arbitrary commands on the fax receiving system. OpenVAS...

Debian: Security Advisory (DSA-1165)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 10 Security Update : capi4hylafax (ZYPP Patch Number 2378)

By using shell meta characters in the sender number remote attackers could execute arbitrary commands. CVE-2006-3126 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

openSUSE 10 Security Update : capi4hylafax (capi4hylafax-2366)

By using shell meta characters in the sender number remote attackers could execute arbitrary commands CVE-2006-3126. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update capi4hylafax-2366. The text...

GLSA-200610-05 : CAPI4Hylafax fax receiver: Execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200610-05 CAPI4Hylafax fax receiver: Execution of arbitrary code Lionel Elie Mamane discovered an error in c2faxrecv, which doesn't properly sanitize TSI strings when handling incoming calls. Impact : A remote attacker can send nu...

Debian DSA-1165-1 : capi4hylafax - missing input sanitising

Lionel Elie Mamane discovered a security vulnerability in capi4hylafax, tools for faxing over a CAPI 2.0 device, that allows remote attackers to execute arbitrary commands on the fax receiving system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

CVE-2006-3126

c2faxrecv in capi4hylafax 01.02.03 allows remote attackers to execute arbitrary commands via null \0 and shell metacharacters in the TSI string, as demonstrated by a fax from an anonymous number...

CVE-2006-3126

c2faxrecv in capi4hylafax 01.02.03 allows remote attackers to execute arbitrary commands via null \0 and shell metacharacters in the TSI string, as demonstrated by a fax from an anonymous number...

CVE-2006-3126

c2faxrecv in capi4hylafax 01.02.03 allows remote attackers to execute arbitrary commands via null \0 and shell metacharacters in the TSI string, as demonstrated by a fax from an anonymous number...

CVE-2006-3126

CVE-2006-3126 affects capi4hylafax (c2faxrecv) where the receiver does not sanitize TSI strings, enabling remote attackers to execute arbitrary commands by injecting nulls (\0) and shell metacharacters in the TSI field from an anonymous fax. The advisory/references document the vulnerability as e...

[SECURITY] [DSA 1165-1] New capi4hylafax packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1165-1 [email protected] http://www.debian.org/security/ Martin Schulze September 1st, 2006 http://www.debian.org/security/faq -...

[Full-disclosure] [SECURITY] [DSA 1165-1] New capi4hylafax packages fix arbitrary command execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1165-1 [email protected] http://www.debian.org/security/ Martin Schulze September 1st, 2006 http://www.debian.org/security/faq -...

capi4hylafax code execution

No description provided...

DSA-1165 capi4hylafax - missing input sanitising

Bulletin has no description...

Arbitrary file deletion

CAPI4HylaFAX 1.3, when compiled with GENERATEDEBUGSFFDATAFILE set, allows local users to modify arbitrary files via a symlink attack on the c2faxrecvdbgdatafile.sff temporary file...