CVE-2018-17141

概要

参考情報

• git.hylafax.org/HylaFAX
• openwall.com/lists/oss-security/2018/09/20/1 · Exploit
• lists.debian.org/debian-lts-announce/2018/09/msg00026.html · Mailing List
• seclists.org/bugtraq/2018/Sep/49 · Exploit
• debian.org/security/2018/dsa-4298 · Third Party Advisory
• x41-dsec.de/lab/advisories/x41-2018-008-hylafax · Exploit

hylafax のその他の脆弱性

• CVE-2005-3539高 7.5Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier allow remote attackers to execute arbitrary commands via (1) the notify…
• CVE-2005-3070低 3.6HylaFax 4.2.1 and earlier does not create or verify ownership of the UNIX domain socket, which might allow local users to read faxes and cau…
• CVE-2005-3069低 2.1xferfaxstats in HylaFax 4.2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on the xferfax$$ temporary fi…
• CVE-2004-1182高 7.5hfaxd in HylaFAX before 4.2.1, when installed with a "weak" hosts.hfaxd file, allows remote attackers to authenticate and bypass intended ac…
• CVE-2003-0886緊急 10.0Format string vulnerability in hfaxd for Hylafax 4.1.7 and earlier allows remote attackers to execute arbitrary code.