Vulnerability in Julian Pawlowski Capi4hylafax
CVE-2006-3126
c2faxrecv in capi4hylafax 01.02.03 allows remote attackers to execute arbitrary commands via null (\0) and shell metacharacters in the TSI string, as demonstrated by a fax from an anonymous number.
EPSS: 0.027 (84.4th percentile) — read the EPSS interpretation.
Affected products
- Julian_pawlowski Capi4hylafax — versions 01.02.03
- N/a — versions n/a
References
- security@debian.org (vdb-entry, x_refsource_BID)
- security@debian.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- security@debian.org (vendor-advisory, x_refsource_SUSE)
- security@debian.org (x_refsource_SECUNIA, third-party-advisory)
- security@debian.org (vdb-entry, x_refsource_VUPEN)
- security@debian.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- security@debian.org (vendor-advisory, x_refsource_GENTOO)
- security@debian.org (Patch, x_refsource_MISC)
- security@debian.org (vendor-advisory, x_refsource_DEBIAN)