remote code execution in hylafax

2003-11-1014:45:25

lists.opensuse.org

927

0.116 Low

EPSS

Percentile

94.7%

JSON

Hylafax is an Open Source fax server which allows sharing of fax equipment among computers by offering its service to clients by a protocol similar to FTP. The SuSE Security Team found a format bug condition during a code review of the hfaxd server. It allows remote attackers to execute arbitrary code as root. However, the bug can not be triggered in hylafax’ default configuration.

OSVersionArchitecturePackageVersionFilename
openSUSE8.1i586hylafax< 4.1.3-145hylafax-4.1.3-145.i586.rpm
openSUSE8.2i586capi4hylafax< 4.1.5-190capi4hylafax-4.1.5-190.i586.rpm
openSUSE9.0i586hylafax< 4.1.7-67hylafax-4.1.7-67.i586.rpm
openSUSE8.2i586hylafax< 4.1.5-190hylafax-4.1.5-190.i586.rpm
openSUSE8.1i586capi4hylafax< 4.1.3-145capi4hylafax-4.1.3-145.i586.rpm
openSUSE7.3sparchylafax< 4.1-122hylafax-4.1-122.sparc.rpm
openSUSE8.0i386hylafax< 4.1-303hylafax-4.1-303.i386.rpm
openSUSE7.3i386hylafax< 4.1-303hylafax-4.1-303.i386.rpm
openSUSE7.3ppchylafax< 4.1-206hylafax-4.1-206.ppc.rpm
openSUSE9.0i586capi4hylafax< 4.1.7-67capi4hylafax-4.1.7-67.i586.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE	8.1	i586	hylafax	< 4.1.3-145	hylafax-4.1.3-145.i586.rpm
openSUSE	8.2	i586	capi4hylafax	< 4.1.5-190	capi4hylafax-4.1.5-190.i586.rpm
openSUSE	9.0	i586	hylafax	< 4.1.7-67	hylafax-4.1.7-67.i586.rpm
openSUSE	8.2	i586	hylafax	< 4.1.5-190	hylafax-4.1.5-190.i586.rpm
openSUSE	8.1	i586	capi4hylafax	< 4.1.3-145	capi4hylafax-4.1.3-145.i586.rpm
openSUSE	7.3	sparc	hylafax	< 4.1-122	hylafax-4.1-122.sparc.rpm
openSUSE	8.0	i386	hylafax	< 4.1-303	hylafax-4.1-303.i386.rpm
openSUSE	7.3	i386	hylafax	< 4.1-303	hylafax-4.1-303.i386.rpm
openSUSE	7.3	ppc	hylafax	< 4.1-206	hylafax-4.1-206.ppc.rpm
openSUSE	9.0	i586	capi4hylafax	< 4.1.7-67	capi4hylafax-4.1.7-67.i586.rpm

remote code execution in hylafax

Related