Gentoo Security Advisory GLSA 200601-03 (hylafax)

The remote host is missing updates announced in advisory GLSA 200601-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200601-03 (hylafax)

The remote host is missing updates announced in advisory GLSA 200601-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HylaFAX hfaxd with PAM Password Policy Bypass

The remote host is running HylaFAX, a fax / pager server application for Linux / unix. The version of HylaFAX installed on the remote host does not check passwords when authenticating users via hfaxd, its fax server. An attacker can exploit this issue to bypass authentication using a valid userna...

CVE-2005-3538

HylaFAX vulnerability CVE-2005-3538 affects hfaxd when PAM support is disabled, allowing remote attackers to login with arbitrary passwords and potentially gain privileges. Connected sources confirm the issue is limited to HylaFAX 4.2.3 with PAM disabled and indicate that a fix was released in Hy...

CVE-2005-3538

hfaxd in HylaFAX 4.2.3, when PAM support is disabled, accepts arbitrary passwords, which allows remote attackers to gain privileges...