gentoo-overlay/metadata/glsa/glsa-200601-03.xml

<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd">
<glsa id="200601-03">
  <title>HylaFAX: Multiple vulnerabilities</title>
  <synopsis>
    HylaFAX is vulnerable to arbitrary code execution and unauthorized access
    vulnerabilities.
  </synopsis>
  <product type="ebuild">hylafax</product>
  <announced>2006-01-06</announced>
  <revised count="01">2006-01-06</revised>
  <bug>116389</bug>
  <access>remote</access>
  <affected>
    <package name="net-misc/hylafax" auto="yes" arch="*">
      <unaffected range="ge">4.2.3-r1</unaffected>
      <vulnerable range="lt">4.2.3-r1</vulnerable>
    </package>
  </affected>
  <background>
    <p>
    HylaFAX is an enterprise-class system for sending and receiving
    facsimile messages and for sending alpha-numeric pages.
    </p>
  </background>
  <description>
    <p>
    Patrice Fournier discovered that HylaFAX runs the notify script on
    untrusted user input. Furthermore, users can log in without a password
    when HylaFAX is installed with the pam USE-flag disabled.
    </p>
  </description>
  <impact type="high">
    <p>
    An attacker could exploit the input validation vulnerability to
    run arbitrary code as the user running HylaFAX, which is usually uucp.
    The password vulnerability could be exploited to log in without proper
    user credentials.
    </p>
  </impact>
  <workaround>
    <p>
    There is no known workaround at this time.
    </p>
  </workaround>
  <resolution>
    <p>
    All HylaFAX users should upgrade to the latest version:
    </p>
    <code>
    # emerge --sync
    # emerge --ask --oneshot --verbose "&gt;=net-misc/hylafax-4.2.3-r1"</code>
  </resolution>
  <references>
    <uri link="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3538">CVE-2005-3538</uri>
    <uri link="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3539">CVE-2005-3539</uri>
    <uri link="https://www.hylafax.org/content/HylaFAX_4.2.4_release">HylaFAX release announcement</uri>
  </references>
  <metadata tag="submitter" timestamp="2006-01-02T21:40:30Z">
    jaervosz
  </metadata>
  <metadata tag="bugReady" timestamp="2006-01-06T13:37:21Z">
    jaervosz
  </metadata>
</glsa>