26 matches found
CVE-2006-1231
CAPI4HylaFAX 1.3, when compiled with GENERATEDEBUGSFFDATAFILE set, allows local users to modify arbitrary files via a symlink attack on the c2faxrecvdbgdatafile.sff temporary file...
CVE-2006-1231
Removed by vendor...
CVE-2006-1231
CVE-2006-1231 affects CAPI4HylaFAX 1.3 when compiled with GENERATE_DEBUGSFFDATAFILE. The vulnerability arises from a symlink attack on the temporary file c2faxrecv_dbgdatafile.sff, enabling local users to modify arbitrary files. The description clearly states local access and a file-override outc...
CVE-2006-1231
CAPI4HylaFAX 1.3, when compiled with GENERATEDEBUGSFFDATAFILE set, allows local users to modify arbitrary files via a symlink attack on the c2faxrecvdbgdatafile.sff temporary file...
[Full-disclosure] capi4hylafax insecure manipulation with tmp files
capi4hylafax suite http://freshmeat.net/projects/capi4hylafax/ is addon for hylafax fax server http://www.hylafax.org/ vulnerable: capi4hylafax-01.03.00 /probably others/ in capi4hylafax-01.03.00/src/faxrecv/faxrecv.cpp : ifdef GENERATEDEBUGSFFDATAFILE dwarning DebugSffDataFile == 0; if...