Approved changes feed: RSS · Atom

cpe:2.3:a:hylafax:hylafax:4.2.3:*:*:*:*:*:*:*

part: a version: 4.2.3 update: *

VendorHylafax (115ecdcd-b8c0-53f4-95b4-49239c34090f)
ProductHylafax (8fd55e63-46ab-561e-b4ee-89587e9407b0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/hylafax purl2cpe 2026-06-01 10:13:46.210478
pkg:deb/ubuntu/hylafax purl2cpe 2026-06-01 10:13:46.210479
pkg:github/autofax/hylafax_copy purl2cpe 2026-06-01 10:13:46.210481
pkg:github/distrotech/hylafax purl2cpe 2026-06-01 10:13:46.210482
pkg:github/ifax/hylafax purl2cpe 2026-06-01 10:13:46.210483
pkg:rpm/fedora/hylafax purl2cpe 2026-06-01 10:13:46.210485
pkg:rpm/opensuse/hylafax purl2cpe 2026-06-01 10:13:46.210486
pkg:sourceforge/hylafax purl2cpe 2026-06-01 10:13:46.210487

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-3539 vulnerable 2026-06-08 04:48:41.109504 Details available
Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier allow remote attackers to execute arbitrary commands via (1) the notify script in HylaFAX 4.2.0 to 4.2.3 and (2) crafted CallID parameters to the faxrcvd script in HylaFAX 4.2.2 and 4.2.3.
Published: 2006-01-06T11:00:00.000Z
Updated: 2024-08-07T23:17:23.340Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.