CVE-2013-5680

Heap-based buffer overflow in hfaxd in HylaFAX+ 5.2.4 through 5.5.3, when using LDAP authentication, might allow remote attackers to cause a denial of service child hang or execute arbitrary code via a long USER command...

CVE-2013-5680

HylaFAX+ 5.2.4–5.5.3 contains a heap-based buffer overflow in hfaxd when LDAP authentication is enabled. The LDAP path allocates a 255-byte buffer and uses strcat on inbound data, allowing an unauthenticated remote attacker to cause a denial of service (child hang) and potentially execute arbitra...