GCVE - cpe:2.3:a:hylafax:hylafax:4.1_beta2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:hylafax:hylafax:4.1_beta2:*:*:*:*:*:*:*

part: a version: 4.1_beta2 update: *

Vendor	Hylafax (`115ecdcd-b8c0-53f4-95b4-49239c34090f`)
Product	Hylafax (`8fd55e63-46ab-561e-b4ee-89587e9407b0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/hylafax`	purl2cpe	2026-06-01 10:13:46.200652
`pkg:deb/ubuntu/hylafax`	purl2cpe	2026-06-01 10:13:46.200654
`pkg:github/autofax/hylafax_copy`	purl2cpe	2026-06-01 10:13:46.200655
`pkg:github/distrotech/hylafax`	purl2cpe	2026-06-01 10:13:46.200657
`pkg:github/ifax/hylafax`	purl2cpe	2026-06-01 10:13:46.200658
`pkg:rpm/fedora/hylafax`	purl2cpe	2026-06-01 10:13:46.200660
`pkg:rpm/opensuse/hylafax`	purl2cpe	2026-06-01 10:13:46.200661
`pkg:sourceforge/hylafax`	purl2cpe	2026-06-01 10:13:46.200662

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2004-1182`	vulnerable	2026-06-08 04:47:53.238989	Details available hfaxd in HylaFAX before 4.2.1, when installed with a "weak" hosts.hfaxd file, allows remote attackers to authenticate and bypass intended access restrictions via a crafted (1) username or (2) hostname that satisfies a regular expression that is matched against a hosts.hfaxd entry without a password. Published: 2005-01-19T05:00:00.000Z Updated: 2024-08-08T00:46:11.513Z Open on db.gcve.eu Reference links http://security.gentoo.org/glsa/glsa-200501-21.xml http://www.debian.org/security/2004/dsa-634 http://www.mandriva.com/security/advisories?name=MDKSA-2005:006 http://marc.info/?l=bugtraq&m=110546971307585&w=2 http://marc.info/?l=hylafax&m=110545119911558&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1050`	vulnerable	2026-06-08 04:46:22.813510	Details available Buffer overflow in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long line of image data. Published: 2003-04-02T05:00:00.000Z Updated: 2024-08-08T03:12:16.909Z Open on db.gcve.eu Reference links http://www.iss.net/security_center/static/9729.php http://archives.neohapsis.com/archives/bugtraq/2002-07/0358.html http://www.securityfocus.com/bid/5349 http://www.novell.com/linux/security/advisories/2002_035_hylafax.html http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=312	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1049`	vulnerable	2026-06-08 04:46:22.812135	Details available Format string vulnerability in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service (crash) via the TSI data element. Published: 2003-04-02T05:00:00.000Z Updated: 2024-08-08T03:12:16.724Z Open on db.gcve.eu Reference links http://archives.neohapsis.com/archives/bugtraq/2002-07/0358.html http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=300 http://www.osvdb.org/5002 http://www.novell.com/linux/security/advisories/2002_035_hylafax.html http://www.debian.org/security/2002/dsa-148	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2001-0387`	vulnerable	2026-06-08 04:45:20.118215	Details available Format string vulnerability in hfaxd in HylaFAX before 4.1.b2_2 allows local users to gain privileges via the -q command line argument. Published: 2001-09-18T04:00:00.000Z Updated: 2024-08-08T04:21:37.227Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/6377 http://archives.neohapsis.com/archives/bugtraq/2001-04/0236.html http://www.securityfocus.com/bid/2574 http://www.securityfocus.com/archive/1/175963 http://www.osvdb.org/5679	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.