CVE-2004-1182

Published: Dec 31, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

hfaxd in HylaFAX before 4.2.1, when installed with a "weak" hosts.hfaxd file, allows remote attackers to authenticate and bypass intended access restrictions via a crafted (1) username or (2) hostname that satisfies a regular expression that is matched against a hosts.hfaxd entry without a password.

Affected (11)

Products: Hylafax: Hylafax

Hylafax

1 product

Hylafax

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Hylafax Hylafax	Version 4.1.1
Hylafax Hylafax	Version 4.1.2
Hylafax Hylafax	Version 4.1.3
Hylafax Hylafax	Version 4.1.5
Hylafax Hylafax	Version 4.1.6
Hylafax Hylafax	Version 4.1.7
Hylafax Hylafax	Version 4.1.8
Hylafax Hylafax	Version 4.1_beta1
Hylafax Hylafax	Version 4.1_beta2
Hylafax Hylafax	Version 4.1_beta3
Hylafax Hylafax	Version 4.2.0