Approved changes feed: RSS · Atom

cpe:2.3:a:hylafax:hylafax:4.2.2:*:*:*:*:*:*:*

part: a version: 4.2.2 update: *

VendorHylafax (115ecdcd-b8c0-53f4-95b4-49239c34090f)
ProductHylafax (8fd55e63-46ab-561e-b4ee-89587e9407b0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/hylafax purl2cpe 2026-06-01 10:13:46.210467
pkg:deb/ubuntu/hylafax purl2cpe 2026-06-01 10:13:46.210469
pkg:github/autofax/hylafax_copy purl2cpe 2026-06-01 10:13:46.210470
pkg:github/distrotech/hylafax purl2cpe 2026-06-01 10:13:46.210471
pkg:github/ifax/hylafax purl2cpe 2026-06-01 10:13:46.210473
pkg:rpm/fedora/hylafax purl2cpe 2026-06-01 10:13:46.210474
pkg:rpm/opensuse/hylafax purl2cpe 2026-06-01 10:13:46.210475
pkg:sourceforge/hylafax purl2cpe 2026-06-01 10:13:46.210477

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-3539 vulnerable 2026-06-08 04:48:41.108832 Details available
Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier allow remote attackers to execute arbitrary commands via (1) the notify script in HylaFAX 4.2.0 to 4.2.3 and (2) crafted CallID parameters to the faxrcvd script in HylaFAX 4.2.2 and 4.2.3.
Published: 2006-01-06T11:00:00.000Z
Updated: 2024-08-07T23:17:23.340Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.