CVE-2004-1182

2004-12-3100:00:00

ubuntu.com

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.005

Percentile

76.4%

JSON

hfaxd in HylaFAX before 4.2.1, when installed with a “weak” hosts.hfaxd
file, allows remote attackers to authenticate and bypass intended access
restrictions via a crafted (1) username or (2) hostname that satisfies a
regular expression that is matched against a hosts.hfaxd entry without a
password.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchhylafax< 4.2.5-1UNKNOWN
ubuntu6.10noarchhylafax< 4.2.5-1UNKNOWN
ubuntu7.04noarchhylafax< 4.2.5-1UNKNOWN