HylaFAX 4.2.1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:hylafax:hylafax:4.2.1:*:*:*:*:*:*:*

part: a version: 4.2.1 update: *

VendorHylafax (115ecdcd-b8c0-53f4-95b4-49239c34090f)
ProductHylafax (8fd55e63-46ab-561e-b4ee-89587e9407b0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/hylafax purl2cpe 2026-06-01 10:13:46.210457
pkg:deb/ubuntu/hylafax purl2cpe 2026-06-01 10:13:46.210458
pkg:github/autofax/hylafax_copy purl2cpe 2026-06-01 10:13:46.210459
pkg:github/distrotech/hylafax purl2cpe 2026-06-01 10:13:46.210461
pkg:github/ifax/hylafax purl2cpe 2026-06-01 10:13:46.210462
pkg:rpm/fedora/hylafax purl2cpe 2026-06-01 10:13:46.210463
pkg:rpm/opensuse/hylafax purl2cpe 2026-06-01 10:13:46.210465
pkg:sourceforge/hylafax purl2cpe 2026-06-01 10:13:46.210466

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-3539 vulnerable 2026-06-08 04:48:41.107778 Details available
Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier allow remote attackers to execute arbitrary commands via (1) the notify script in HylaFAX 4.2.0 to 4.2.3 and (2) crafted CallID parameters to the faxrcvd script in HylaFAX 4.2.2 and 4.2.3.
Published: 2006-01-06T11:00:00.000Z
Updated: 2024-08-07T23:17:23.340Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3069 vulnerable 2026-06-08 04:48:39.481474 Details available
xferfaxstats in HylaFax 4.2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on the xferfax$$ temporary file.
Published: 2005-09-27T04:00:00.000Z
Updated: 2024-08-07T23:01:57.952Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.