358 matches found
hylafax -- unauthorized login vulnerability
A flaw in HylaFAX may allow an attacker to bypass normal authentication by spoofing their DNS PTR records...
CVE-2004-1182
hfaxd in HylaFAX before 4.2.1, when installed with a "weak" hosts.hfaxd file, allows remote attackers to authenticate and bypass intended access restrictions via a crafted 1 username or 2 hostname that satisfies a regular expression that is matched against a hosts.hfaxd entry without a password...
CVE-2004-1182
hfaxd in HylaFAX before 4.2.1, when installed with a "weak" hosts.hfaxd file, allows remote attackers to authenticate and bypass intended access restrictions via a crafted 1 username or 2 hostname that satisfies a regular expression that is matched against a hosts.hfaxd entry without a password...
CVE-2004-1182
hfaxd in HylaFAX before 4.2.1, when installed with a "weak" hosts.hfaxd file, allows remote attackers to authenticate and bypass intended access restrictions via a crafted 1 username or 2 hostname that satisfies a regular expression that is matched against a hosts.hfaxd entry without a password...
DEBIAN-CVE-2004-1182
hfaxd in HylaFAX before 4.2.1, when installed with a "weak" hosts.hfaxd file, allows remote attackers to authenticate and bypass intended access restrictions via a crafted 1 username or 2 hostname that satisfies a regular expression that is matched against a hosts.hfaxd entry without a password...
Debian DSA-401-1 : hylafax - format strings
The SuSE Security Team discovered several exploitable formats string vulnerabilities in hylafax, a flexible client/server fax system, which could lead to executing arbitrary code as root on the fax server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...
Debian DSA-148-1 : hylafax - buffer overflows and format string vulnerabilities
A set of problems have been discovered in Hylafax, a flexible client/server fax software distributed with many GNU/Linux distributions. Quoting SecurityFocus the problems are in detail : - A format string vulnerability makes it possible for users to potentially execute arbitrary code on some...
HylaFAX < 4.2.1 Remote Access Control Bypass
Binary data 2517.prm...
Mandrake Linux Security Advisory : hylafax (MDKSA-2003:105)
During a code review of the hfaxd server, part of the hylafax package, the SuSE Security Team discovered a format bug condition that allows remote attackers to execute arbitrary code as the root user. Updated packages have been patched to correct the problem. %NASLMINLEVEL 70300 C Tenable Network...
Mandrake Linux Security Advisory : hylafax (MDKSA-2002:055)
Numerous vulnerabilities in the HylaFAX product exist in versions prior to 4.1.3. It does not check the TSI string which is received from remote FAX systems before using it in logging and other places. A remote sender using a specially formatted TSI string can cause the faxgetty program to...
SUSE-SA:2002:035: hylafax
The remote host is missing the patch for the advisory SUSE-SA:2002:035 hylafax. HylaFAX is a client-server architecture for receiving and sending facsimiles. The logging function of faxgetty prior version 4.1.3 was vulnerable to a format string bug when handling the TSI value of a received...
SuSE-SA:2003:045: hylafax
The remote host is missing the patch for the advisory SuSE-SA:2003:045 hylafax. Hylafax is an Open Source fax server which allows sharing of fax equipment among computers by offering its service to clients by a protocol similar to FTP. The SuSE Security Team found a format bug condition during a...
DEBIAN-CVE-2003-0886
Format string vulnerability in hfaxd for Hylafax 4.1.7 and earlier allows remote attackers to execute arbitrary code...
CVE-2003-0886
Format string vulnerability in hfaxd for Hylafax 4.1.7 and earlier allows remote attackers to execute arbitrary code...
CVE-2003-0886
Format string vulnerability in hfaxd for Hylafax 4.1.7 and earlier allows remote attackers to execute arbitrary code...
[SECURITY] [DSA 401-1] New hylafax packages fix remote root exploit
-------------------------------------------------------------------------- Debian Security Advisory DSA 401-1 [email protected] http://www.debian.org/security/ Martin Schulze November 17th, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA 401-1] New hylafax packages fix remote root exploit
-------------------------------------------------------------------------- Debian Security Advisory DSA 401-1 [email protected] http://www.debian.org/security/ Martin Schulze November 17th, 2003 http://www.debian.org/security/faq -...
DSA-401 hylafax - format strings
Bulletin has no description...
SUSE Security Announcement: hylafax (SuSE-SA:2003:045)
-----BEGIN PGP SIGNED MESSAGE----- SUSE Security Announcement Package: hylafax Announcement-ID: SuSE-SA:2003:045 Date: Mon Nov 10 15:00:00 CET 2003 Affected products: 7.3, 8.0, 8.1, 8.2, 9.0 SuSE Linux Enterprise Server 7 SuSE Linux Standard Server 8 SuSE Linux Desktop 1.0 SuSE Linux Office Serve...