CVE-2005-3539

Published: Dec 31, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier allow remote attackers to execute arbitrary commands via (1) the notify script in HylaFAX 4.2.0 to 4.2.3 and (2) crafted CallID parameters to the faxrcvd script in HylaFAX 4.2.2 and 4.2.3.

Affected (5)

Products: Hylafax: Hylafax

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Hylafax Hylafax	Version 4.1.1
Hylafax Hylafax	Version 4.2.1
Hylafax Hylafax	Version 4.2.2
Hylafax Hylafax	Version 4.2.3
Hylafax Hylafax	Version 4.2

References (24)

http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=719

Source: security@debian.org

http://secunia.com/advisories/18314

Source: security@debian.org

PatchVendor Advisory

http://secunia.com/advisories/18337

Source: security@debian.org

PatchVendor Advisory

http://secunia.com/advisories/18366

Source: security@debian.org

http://secunia.com/advisories/18489

Source: security@debian.org

http://www.debian.org/security/2005/dsa-933

Source: security@debian.org

http://www.gentoo.org/security/en/glsa/glsa-200601-03.xml

Source: security@debian.org

PatchVendor Advisory

http://www.hylafax.org/content/HylaFAX_4.2.4_release

Source: security@debian.org

http://www.mandriva.com/security/advisories?name=MDKSA-2006:015

Source: security@debian.org

http://www.securityfocus.com/archive/1/420974/100/0/threaded

Source: security@debian.org

http://www.securityfocus.com/bid/16151

Source: security@debian.org

ExploitPatch

http://www.vupen.com/english/advisories/2006/0072

Source: security@debian.org

http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=719

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/18314

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/18337

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/18366

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/18489

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2005/dsa-933

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-200601-03.xml

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.hylafax.org/content/HylaFAX_4.2.4_release

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2006:015

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/420974/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/16151

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

http://www.vupen.com/english/advisories/2006/0072

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.