Approved changes feed: RSS · Atom

cpe:2.3:a:hylafax:hylafax:4.2.0:*:*:*:*:*:*:*

part: a version: 4.2.0 update: *

VendorHylafax (115ecdcd-b8c0-53f4-95b4-49239c34090f)
ProductHylafax (8fd55e63-46ab-561e-b4ee-89587e9407b0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/hylafax purl2cpe 2026-06-01 10:13:46.210446
pkg:deb/ubuntu/hylafax purl2cpe 2026-06-01 10:13:46.210447
pkg:github/autofax/hylafax_copy purl2cpe 2026-06-01 10:13:46.210449
pkg:github/distrotech/hylafax purl2cpe 2026-06-01 10:13:46.210450
pkg:github/ifax/hylafax purl2cpe 2026-06-01 10:13:46.210451
pkg:rpm/fedora/hylafax purl2cpe 2026-06-01 10:13:46.210453
pkg:rpm/opensuse/hylafax purl2cpe 2026-06-01 10:13:46.210454
pkg:sourceforge/hylafax purl2cpe 2026-06-01 10:13:46.210455

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2004-1182 vulnerable 2026-06-08 04:47:53.240277 Details available
hfaxd in HylaFAX before 4.2.1, when installed with a "weak" hosts.hfaxd file, allows remote attackers to authenticate and bypass intended access restrictions via a crafted (1) username or (2) hostname that satisfies a regular expression that is matched against a hosts.hfaxd entry without a password.
Published: 2005-01-19T05:00:00.000Z
Updated: 2024-08-08T00:46:11.513Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.