Gentoo Linux Security Advisory GLSA 200610-05
https://security.gentoo.org/
Severity: High
Title: CAPI4Hylafax fax receiver: Execution of arbitrary code
Date: October 17, 2006
Bugs: #145982
ID: 200610-05
Synopsis
=======
CAPI4Hylafax allows remote attackers to execute arbitrary commands.
Background
=========
CAPI4Hylafax makes it possible to send and receive faxes via CAPI and
AVM Fritz!Cards.
Affected packages
================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 capi4hylafax < 01.03.00.99.300.3-r1 >= 01.03.00.99.300.3-r1
==========
Lionel Elie Mamane discovered an error in c2faxrecv, which doesn't
properly sanitize TSI strings when handling incoming calls.
Impact
=====
A remote attacker can send null ...
style>.gentoo_availability{display:block;}
Get the latest Linux and open source security news straight to your inbox.