CVE-2005-3539

Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier allow remote attackers to execute arbitrary commands via (1) the notify script in HylaFAX 4.2.0 to 4.2.3 and (2) crafted CallID parameters to the faxrcvd script in HylaFAX 4.2.2 and 4.2.3.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=719
http://www.hylafax.org/content/HylaFAX_4.2.4_release
http://www.securityfocus.com/bid/16151	Exploit Patch
http://www.gentoo.org/security/en/glsa/glsa-200601-03.xml	Patch Vendor Advisory
http://secunia.com/advisories/18314	Patch Vendor Advisory
http://secunia.com/advisories/18337	Patch Vendor Advisory
http://www.debian.org/security/2005/dsa-933
http://secunia.com/advisories/18366
http://secunia.com/advisories/18489
http://www.mandriva.com/security/advisories?name=MDKSA-2006:015
http://www.vupen.com/english/advisories/2006/0072
http://www.securityfocus.com/archive/1/420974/100/0/threaded

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:hylafax:hylafax:4.1.1:::::::*
	cpe:2.3:a:hylafax:hylafax:4.2:::::::*
	cpe:2.3:a:hylafax:hylafax:4.2.1:::::::*
	cpe:2.3:a:hylafax:hylafax:4.2.2:::::::*
	cpe:2.3:a:hylafax:hylafax:4.2.3:::::::*

Information

Published : 2005-12-31 05:00

Updated : 2018-10-19 15:36

NVD link : CVE-2005-3539

Mitre link : CVE-2005-3539

JSON object : View

Products Affected

hylafax

hylafax

CWE

NVD-CWE-Other

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=719", "name": "http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=719", "tags": [], "refsource": "MISC"}, {"url": "http://www.hylafax.org/content/HylaFAX_4.2.4_release", "name": "http://www.hylafax.org/content/HylaFAX_4.2.4_release", "tags": [], "refsource": "CONFIRM"}, {"url": "http://www.securityfocus.com/bid/16151", "name": "16151", "tags": ["Exploit", "Patch"], "refsource": "BID"}, {"url": "http://www.gentoo.org/security/en/glsa/glsa-200601-03.xml", "name": "GLSA-200601-03", "tags": ["Patch", "Vendor Advisory"], "refsource": "GENTOO"}, {"url": "http://secunia.com/advisories/18314", "name": "18314", "tags": ["Patch", "Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://secunia.com/advisories/18337", "name": "18337", "tags": ["Patch", "Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.debian.org/security/2005/dsa-933", "name": "DSA-933", "tags": [], "refsource": "DEBIAN"}, {"url": "http://secunia.com/advisories/18366", "name": "18366", "tags": [], "refsource": "SECUNIA"}, {"url": "http://secunia.com/advisories/18489", "name": "18489", "tags": [], "refsource": "SECUNIA"}, {"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:015", "name": "MDKSA-2006:015", "tags": [], "refsource": "MANDRIVA"}, {"url": "http://www.vupen.com/english/advisories/2006/0072", "name": "ADV-2006-0072", "tags": [], "refsource": "VUPEN"}, {"url": "http://www.securityfocus.com/archive/1/420974/100/0/threaded", "name": "20060105 HylaFAX Security advisory - fixed in HylaFAX 4.2.4", "tags": [], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier allow remote attackers to execute arbitrary commands via (1) the notify script in HylaFAX 4.2.0 to 4.2.3 and (2) crafted CallID parameters to the faxrcvd script in HylaFAX 4.2.2 and 4.2.3."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2005-3539", "ASSIGNER": "security@debian.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "HIGH", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2005-12-31T05:00Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:hylafax:hylafax:4.1.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:hylafax:hylafax:4.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:hylafax:hylafax:4.2.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:hylafax:hylafax:4.2.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:hylafax:hylafax:4.2.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-19T15:36Z"}