Format string vulnerability in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service (crash) via the TSI data element.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Hylafax | Hylafax | 4.0.2 (including) | 4.0.2 (including) |
| Hylafax | Hylafax | 4.0_pl0 (including) | 4.0_pl0 (including) |
| Hylafax | Hylafax | 4.0_pl1 (including) | 4.0_pl1 (including) |
| Hylafax | Hylafax | 4.0_pl2 (including) | 4.0_pl2 (including) |
| Hylafax | Hylafax | 4.1 (including) | 4.1 (including) |
| Hylafax | Hylafax | 4.1.1 (including) | 4.1.1 (including) |
| Hylafax | Hylafax | 4.1.2 (including) | 4.1.2 (including) |
| Hylafax | Hylafax | 4.1_beta1 (including) | 4.1_beta1 (including) |
| Hylafax | Hylafax | 4.1_beta2 (including) | 4.1_beta2 (including) |
| Hylafax | Hylafax | 4.1_beta3 (including) | 4.1_beta3 (including) |
References
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0358.html
- http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=300
- http://www.debian.org/security/2002/dsa-148
- http://www.iss.net/security_center/static/9728.php
- http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:055
- http://www.novell.com/linux/security/advisories/2002_035_hylafax.html
- http://www.osvdb.org/5002
- http://www.securityfocus.com/bid/5348
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0358.html
- http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=300
- http://www.debian.org/security/2002/dsa-148
- http://www.iss.net/security_center/static/9728.php
- http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:055
- http://www.novell.com/linux/security/advisories/2002_035_hylafax.html
- http://www.osvdb.org/5002
- http://www.securityfocus.com/bid/5348