Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 507
Alerts This Week
Warning Icon 1 507

Gentoo: GLSA-200501-21 Moderate: HylaFAX hfaxd Access Control Bypass

gentoo
Calendar Grey January 11, 2005
Scroller Gentoo
An unauthorized login vulnerability in HylaFAX on Gentoo systems poses a risk of sensitive data exposure. Follow the necessary steps to secure your server.
HylaFAX is subject to a vulnerability in its username matching code, potentially allowing remote users to bypass access control lists.

Summary

Gentoo Linux Security Advisory GLSA 200501-21 https://security.gentoo.org/ Severity: Normal Title: HylaFAX: hfaxd unauthorized login vulnerability Date: January 11, 2005 Bugs: #75941 ID: 200501-21

Synopsis ======= HylaFAX is subject to a vulnerability in its username matching code, potentially allowing remote users to bypass access control lists.
Background ========= HylaFAX is a software package for sending and receiving facsimile messages.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-misc/hylafax < 4.2.0-r2 >= 4.2.0-r2
========== The code used by hfaxd to match a given username and hostname with an entry in the hosts.hfaxd file is insufficiently prot...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory moderate gentoo access control login issue hylafax unauthorized login

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Severity
important
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory moderate gentoo access control login issue hylafax unauthorized login

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround