{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-01-05T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier allow remote attackers to execute arbitrary commands via (1) the notify script in HylaFAX 4.2.0 to 4.2.3 and (2) crafted CallID parameters to the faxrcvd script in HylaFAX 4.2.2 and 4.2.3."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-19T14:57:01", "orgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5", "shortName": "debian"}, "references": [{"name": "18314", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/18314"}, {"name": "16151", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/16151"}, {"name": "18366", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/18366"}, {"name": "18337", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/18337"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.hylafax.org/content/HylaFAX_4.2.4_release"}, {"name": "GLSA-200601-03", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200601-03.xml"}, {"name": "18489", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/18489"}, {"name": "DSA-933", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2005/dsa-933"}, {"name": "20060105 HylaFAX Security advisory - fixed in HylaFAX 4.2.4", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/420974/100/0/threaded"}, {"tags": ["x_refsource_MISC"], "url": "http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=719"}, {"name": "ADV-2006-0072", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/0072"}, {"name": "MDKSA-2006:015", "tags": ["vendor-advisory", "x_refsource_MANDRIVA"], "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:015"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2005-3539", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier allow remote attackers to execute arbitrary commands via (1) the notify script in HylaFAX 4.2.0 to 4.2.3 and (2) crafted CallID parameters to the faxrcvd script in HylaFAX 4.2.2 and 4.2.3."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "18314", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/18314"}, {"name": "16151", "refsource": "BID", "url": "http://www.securityfocus.com/bid/16151"}, {"name": "18366", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/18366"}, {"name": "18337", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/18337"}, {"name": "http://www.hylafax.org/content/HylaFAX_4.2.4_release", "refsource": "CONFIRM", "url": "http://www.hylafax.org/content/HylaFAX_4.2.4_release"}, {"name": "GLSA-200601-03", "refsource": "GENTOO", "url": "http://www.gentoo.org/security/en/glsa/glsa-200601-03.xml"}, {"name": "18489", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/18489"}, {"name": "DSA-933", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2005/dsa-933"}, {"name": "20060105 HylaFAX Security advisory - fixed in HylaFAX 4.2.4", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/420974/100/0/threaded"}, {"name": "http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=719", "refsource": "MISC", "url": "http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=719"}, {"name": "ADV-2006-0072", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/0072"}, {"name": "MDKSA-2006:015", "refsource": "MANDRIVA", "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:015"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T23:17:23.340Z"}, "title": "CVE Program Container", "references": [{"name": "18314", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/18314"}, {"name": "16151", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/16151"}, {"name": "18366", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/18366"}, {"name": "18337", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/18337"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.hylafax.org/content/HylaFAX_4.2.4_release"}, {"name": "GLSA-200601-03", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200601-03.xml"}, {"name": "18489", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/18489"}, {"name": "DSA-933", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2005/dsa-933"}, {"name": "20060105 HylaFAX Security advisory - fixed in HylaFAX 4.2.4", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/420974/100/0/threaded"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=719"}, {"name": "ADV-2006-0072", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/0072"}, {"name": "MDKSA-2006:015", "tags": ["vendor-advisory", "x_refsource_MANDRIVA", "x_transferred"], "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:015"}]}]}, "cveMetadata": {"assignerOrgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5", "assignerShortName": "debian", "cveId": "CVE-2005-3539", "datePublished": "2006-01-06T11:00:00", "dateReserved": "2005-11-16T00:00:00", "dateUpdated": "2024-08-07T23:17:23.340Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hylafax:hylafax:4.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "E1932A13-7BC2-4E15-B1E6-54B62F36B5FF", "vulnerable": true}, {"criteria": "cpe:2.3:a:hylafax:hylafax:4.2:*:*:*:*:*:*:*", "matchCriteriaId": "B1986347-8C08-4F35-BA61-6155DC68263E", "vulnerable": true}, {"criteria": "cpe:2.3:a:hylafax:hylafax:4.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "FFCC3306-1850-4CDE-B97C-377CD3FE3D0C", "vulnerable": true}, {"criteria": "cpe:2.3:a:hylafax:hylafax:4.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "07C0F177-AD00-4D46-B80F-ACE1C5A75595", "vulnerable": true}, {"criteria": "cpe:2.3:a:hylafax:hylafax:4.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "0FA4C7C6-EF84-436F-94F8-8600372CBE92", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier allow remote attackers to execute arbitrary commands via (1) the notify script in HylaFAX 4.2.0 to 4.2.3 and (2) crafted CallID parameters to the faxrcvd script in HylaFAX 4.2.2 and 4.2.3."}], "id": "CVE-2005-3539", "lastModified": "2024-11-21T00:02:08.317", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": true, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}]}, "published": "2005-12-31T05:00:00.000", "references": [{"source": "[email protected]", "url": "http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=719"}, {"source": "[email protected]", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/18314"}, {"source": "[email protected]", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/18337"}, {"source": "[email protected]", "url": "http://secunia.com/advisories/18366"}, {"source": "[email protected]", "url": "http://secunia.com/advisories/18489"}, {"source": "[email protected]", "url": "http://www.debian.org/security/2005/dsa-933"}, {"source": "[email protected]", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200601-03.xml"}, {"source": "[email protected]", "url": "http://www.hylafax.org/content/HylaFAX_4.2.4_release"}, {"source": "[email protected]", "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:015"}, {"source": "[email protected]", "url": "http://www.securityfocus.com/archive/1/420974/100/0/threaded"}, {"source": "[email protected]", "tags": ["Exploit", "Patch"], "url": "http://www.securityfocus.com/bid/16151"}, {"source": "[email protected]", "url": "http://www.vupen.com/english/advisories/2006/0072"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=719"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/18314"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/18337"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/18366"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/18489"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.debian.org/security/2005/dsa-933"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200601-03.xml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.hylafax.org/content/HylaFAX_4.2.4_release"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:015"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/420974/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Patch"], "url": "http://www.securityfocus.com/bid/16151"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2006/0072"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "[email protected]", "type": "Primary"}]}

{}