7.5

CVE-2005-3539

Exploit

EPSS 31%
Veröffentlicht 31.12.2005 05:00:00
Zuletzt bearbeitet 16.04.2026 00:27:16
Quelle security@debian.org
CVE-Watchlists
Login
Unerledigt
Login

Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier allow remote attackers to execute arbitrary commands via (1) the notify script in HylaFAX 4.2.0 to 4.2.3 and (2) crafted CallID parameters to the faxrcvd script in HylaFAX 4.2.2 and 4.2.3.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 15

NVD 5 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Hylafax ≫ Hylafax Version4.1.1

Hylafax ≫ Hylafax Version4.2

Hylafax ≫ Hylafax Version4.2.1

Hylafax ≫ Hylafax Version4.2.2

Hylafax ≫ Hylafax Version4.2.3

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	31%	0.966

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=719

http://secunia.com/advisories/18314

Patch

Vendor Advisory

http://secunia.com/advisories/18337

Patch

Vendor Advisory

http://secunia.com/advisories/18489

http://www.gentoo.org/security/en/glsa/glsa-200601-03.xml

Patch

Vendor Advisory

http://www.hylafax.org/content/HylaFAX_4.2.4_release

http://www.mandriva.com/security/advisories?name=MDKSA-2006:015

http://www.securityfocus.com/archive/1/420974/100/0/threaded

http://www.vupen.com/english/advisories/2006/0072

http://secunia.com/advisories/18366

http://www.debian.org/security/2005/dsa-933

http://www.securityfocus.com/bid/16151

Patch

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2005-3539

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-3539

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-3539

EUVD