Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
hylafax hylafax 4.2.1 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2005-3539
Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and previous versions allow remote malicious users to execute arbitrary commands via (1) the notify script in HylaFAX 4.2.0 to 4.2.3 and (2) crafted CallID parameters to the faxrcvd script in HylaFAX 4.2.2 and 4.2.3.
Hylafax Hylafax 4.1.1
Hylafax Hylafax 4.2
Hylafax Hylafax 4.2.1
Hylafax Hylafax 4.2.2
Hylafax Hylafax 4.2.3
1 EDB exploit
NA
CVE-2005-3069
xferfaxstats in HylaFax 4.2.1 and previous versions allows local users to overwrite arbitrary files via a symlink attack on the xferfax$$ temporary file.
Hylafax Hylafax 4.2.1
NA
CVE-2004-1182
hfaxd in HylaFAX prior to 4.2.1, when installed with a "weak" hosts.hfaxd file, allows remote malicious users to authenticate and bypass intended access restrictions via a crafted (1) username or (2) hostname that satisfies a regular expression that is matched against a...
Hylafax Hylafax 4.1.2
Hylafax Hylafax 4.1.3
Hylafax Hylafax 4.1 Beta3
Hylafax Hylafax 4.2.0
Hylafax Hylafax 4.1.7
Hylafax Hylafax 4.1.8
Hylafax Hylafax 4.1.5
Hylafax Hylafax 4.1.6
Hylafax Hylafax 4.1.1
Hylafax Hylafax 4.1 Beta1
Hylafax Hylafax 4.1 Beta2
NA
CVE-2005-3070
HylaFax 4.2.1 and previous versions does not create or verify ownership of the UNIX domain socket, which might allow local users to read faxes and cause a denial of service by creating the socket using the hyla.unix temporary file.
Hylafax Hylafax
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4946
CVE-2024-30309
CVE-2024-4761
CVE-2024-30051
type confusion
memory leak
CVE-2024-30293
reflected XSS
CVE-2024-3126
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started