Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
hylafax hylafax 4.2.1 vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2005-3539
Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and previous versions allow remote malicious users to execute arbitrary commands via (1) the notify script in HylaFAX 4.2.0 to 4.2.3 and (2) crafted CallID parameters to the faxrcvd script in HylaFAX 4.2.2 and 4.2.3.
Hylafax Hylafax 4.1.1
Hylafax Hylafax 4.2
Hylafax Hylafax 4.2.1
Hylafax Hylafax 4.2.2
Hylafax Hylafax 4.2.3
1 EDB exploit
2.1
CVSSv2
CVE-2005-3069
xferfaxstats in HylaFax 4.2.1 and previous versions allows local users to overwrite arbitrary files via a symlink attack on the xferfax$$ temporary file.
Hylafax Hylafax 4.2.1
7.5
CVSSv2
CVE-2004-1182
hfaxd in HylaFAX prior to 4.2.1, when installed with a "weak" hosts.hfaxd file, allows remote malicious users to authenticate and bypass intended access restrictions via a crafted (1) username or (2) hostname that satisfies a regular expression that is matched against a...
Hylafax Hylafax 4.1.2
Hylafax Hylafax 4.1.3
Hylafax Hylafax 4.1 Beta3
Hylafax Hylafax 4.2.0
Hylafax Hylafax 4.1.7
Hylafax Hylafax 4.1.8
Hylafax Hylafax 4.1.5
Hylafax Hylafax 4.1.6
Hylafax Hylafax 4.1.1
Hylafax Hylafax 4.1 Beta1
Hylafax Hylafax 4.1 Beta2
3.6
CVSSv2
CVE-2005-3070
HylaFax 4.2.1 and previous versions does not create or verify ownership of the UNIX domain socket, which might allow local users to read faxes and cause a denial of service by creating the socket using the hyla.unix temporary file.
Hylafax Hylafax
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654
CVE-2024-2757
authentication bypass
CVE-2024-3194
CVE-2024-33640
CVE-2024-21111
dos
insecure direct object reference
CVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started