Hylafax

10 CVEs across 2 Hylafax products. Browse Hylafax vulnerabilities, severities, and proof-of-concept exploits.

Hylafax products with known CVEs

ProductCVEs
Hylafax10
Hylafax\+1
Hylafax CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2018-17141Critical9.82018-09-21HylaFAX 6.0.6 and HylaFAX+ 5.6.0 allow remote attackers to execute arbitrary code via a dial-in session that provides a FAX page with the JPEG bit enabled, whi…
CVE-2005-35392005-12-31Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier allow remote attackers to execute arbitrary commands via (1) the notify script in HylaFAX…
CVE-2005-30702005-09-27HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which might allow local users to read faxes and cause a denial of serv…
CVE-2005-30692005-09-27xferfaxstats in HylaFax 4.2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on the xferfax$$ temporary file.
CVE-2004-11822004-12-31hfaxd in HylaFAX before 4.2.1, when installed with a "weak" hosts.hfaxd file, allows remote attackers to authenticate and bypass intended access restrictions v…
CVE-2003-08862003-12-01Format string vulnerability in hfaxd for Hylafax 4.1.7 and earlier allows remote attackers to execute arbitrary code.
CVE-2002-10502002-10-04Buffer overflow in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long line of…
CVE-2002-10492002-10-04Format string vulnerability in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service (crash) via the TSI data element.
CVE-2001-03872001-07-02Format string vulnerability in hfaxd in HylaFAX before 4.1.b2_2 allows local users to gain privileges via the -q command line argument.
CVE-1999-13401999-11-04Buffer overflow in faxalter in hylafax 4.0.2 allows local users to gain privileges via a long -m command line argument.