Show filters
6 Total Results
Displaying 1-6 of 6
Sort by:
Attacker Value
Unknown

CVE-2005-3539

Disclosure Date: December 31, 2005 (last updated February 22, 2025)
Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier allow remote attackers to execute arbitrary commands via (1) the notify script in HylaFAX 4.2.0 to 4.2.3 and (2) crafted CallID parameters to the faxrcvd script in HylaFAX 4.2.2 and 4.2.3.
0
0
Attacker Value
Unknown

CVE-2004-1182

Disclosure Date: December 31, 2004 (last updated February 22, 2025)
hfaxd in HylaFAX before 4.2.1, when installed with a "weak" hosts.hfaxd file, allows remote attackers to authenticate and bypass intended access restrictions via a crafted (1) username or (2) hostname that satisfies a regular expression that is matched against a hosts.hfaxd entry without a password.
0
0
Attacker Value
Unknown

CVE-2003-0886

Disclosure Date: December 01, 2003 (last updated February 22, 2025)
Format string vulnerability in hfaxd for Hylafax 4.1.7 and earlier allows remote attackers to execute arbitrary code.
0
0
Attacker Value
Unknown

CVE-2002-1050

Disclosure Date: October 04, 2002 (last updated February 22, 2025)
Buffer overflow in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long line of image data.
0
0
Attacker Value
Unknown

CVE-2002-1049

Disclosure Date: October 04, 2002 (last updated February 22, 2025)
Format string vulnerability in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service (crash) via the TSI data element.
0
0
Attacker Value
Unknown

CVE-2001-0387

Disclosure Date: July 02, 2001 (last updated February 22, 2025)
Format string vulnerability in hfaxd in HylaFAX before 4.1.b2_2 allows local users to gain privileges via the -q command line argument.
0
0