CVE-2008-4936

The CVE-2008-4936 issue affects mgetty 1.1.36 (faxspool). Local users can overwrite arbitrary files via a symlink attack on a /tmp/faxsp.##### temporary file, due to insecure temporary file handling in faxspool. The vulnerability is exploitable locally with no authentication required. A mitigatio...

CVE-2002-1391

The CVE-2002-1391 issue affects mgetty prior to 1.1.29, where a buffer overflow in the internal handling of Caller ID CallerName could allow a remote attacker to cause a Denial of Service and potentially execute arbitrary code via a long Caller Name. The vulnerability is documented in multiple ad...

CVE-2002-1392

The CVE-2002-1392 issue affects mgetty before 1.1.29, where the faxspool directory is world-writable, allowing local users to modify fax transmission privileges. Public advisories (e.g., RHSA-2003:008 and RHSA-2003:036) document a fixed upgrade path to mgetty 1.1.30 to resolve both the buffer-ove...

CVE-2000-0691

The CVE-2000-0691 issue affects the mgetty package’s faxrunq and faxrunqd components. A local attacker can leverage a symlink attack to create or modify arbitrary files by placing a symlink at /var/spool/fax/outgoing/.last_run that targets a chosen file. This is a local-privilege concern with par...

CVE-2001-0141

CVE-2001-0141 affects mgetty: multiple sources confirm insecure temporary-file handling that allows local users to overwrite arbitrary files via a symlink attack in certain configurations. Vulnerable until versions before 1.1.24 (Mandrake/MDKSA-2001:009; Debian DSA-011-2 notes patch in 1.1.21-3po...

CVE-2003-0516

CVE-2003-0516 affects cnd.c in mgetty 1.1.28 and earlier, where non‑printable characters and quotes are not properly filtered. This may allow remote attackers to execute arbitrary commands via shell metacharacters in the caller ID or caller name strings. Affected product: mgetty (1.1.28 and earli...