HylaFAX: input validation vulnerability
| Package(s): | hylafax | CVE #(s): | CVE-2005-3538 CVE-2005-3539 | ||||||||||||
| Created: | January 6, 2006 | Updated: | January 17, 2006 | ||||||||||||
| Description: | The HylaFAX 4.2.4 release corrects issues with previous versions. HylaFAX runs the notify script on untrusted user input. Furthermore, users can log in without a password when HylaFAX is installed with the pam USE-flag disabled. | ||||||||||||||
| Alerts: |
| ||||||||||||||