CVE-2018-17141

Description

References

• git.hylafax.org/HylaFAX
• openwall.com/lists/oss-security/2018/09/20/1 · Exploit
• lists.debian.org/debian-lts-announce/2018/09/msg00026.html · Mailing List
• seclists.org/bugtraq/2018/Sep/49 · Exploit
• debian.org/security/2018/dsa-4298 · Third Party Advisory
• x41-dsec.de/lab/advisories/x41-2018-008-hylafax · Exploit

More vulnerabilities in hylafax

• CVE-2005-3539HIGH 7.5Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier allow remote attackers to execute arbitrary commands via (1) the notify…
• CVE-2005-3070LOW 3.6HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which might allow local users to read faxes and cau…
• CVE-2005-3069LOW 2.1xferfaxstats in HylaFax 4.2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on the xferfax$$ temporary fi…
• CVE-2004-1182HIGH 7.5hfaxd in HylaFAX before 4.2.1, when installed with a "weak" hosts.hfaxd file, allows remote attackers to authenticate and bypass intended ac…
• CVE-2003-0886CRITICAL 10.0Format string vulnerability in hfaxd for Hylafax 4.1.7 and earlier allows remote attackers to execute arbitrary code.