Hylafax Hostname Format String Vulnerability

Bugtraq ID:	3357
Class:	Input Validation Error
CVE:	CVE-2001-1034
Remote:	No
Local:	Yes
Published:	Sep 23 2001 12:00AM
Updated:	Jul 11 2009 07:56AM
Credit:	This vulnerability was announced by <[email protected]> via Bugtraq on September 23, 2001.
Vulnerable:	Hylafax Hylafax 4.1.2 Hylafax Hylafax 4.1.1 + Debian Linux 3.0 Hylafax Hylafax 4.1 - FreeBSD FreeBSD 4.4 + MandrakeSoft Corporate Server 1.0.1 + Mandriva Linux Mandrake 8.2 ppc + Mandriva Linux Mandrake 8.2 + Mandriva Linux Mandrake 8.1 ia64 + Mandriva Linux Mandrake 8.1 + Mandriva Linux Mandrake 8.0 ppc + Mandriva Linux Mandrake 8.0 + Mandriva Linux Mandrake 7.2 + Mandriva Linux Mandrake 7.1 + SuSE Linux 8.0 i386 + SuSE Linux 8.0 + SuSE Linux 7.3 sparc + SuSE Linux 7.3 ppc + SuSE Linux 7.3 i386 + SuSE Linux 7.3
Not Vulnerable:	Hylafax Hylafax 4.1.3 + Mandriva Linux Mandrake 8.2 ppc + Mandriva Linux Mandrake 8.2 + Mandriva Linux Mandrake 8.1 ia64 + Mandriva Linux Mandrake 8.1 + Mandriva Linux Mandrake 8.0 ppc + Mandriva Linux Mandrake 8.0 + SuSE Linux 8.1

Hylafax Hostname Format String Vulnerability

Hylafax is a software package designed to handle the transmission of faxes.

A problem has been discovered in Hylafax. A format string vulnerability makes it possible for users to potentially execute arbitrary code on some implementations. Due to the insufficient checking of input, it's possible to execute a format string attack. This only affects systems with the faxrm and faxalter programs installed setuid.

This makes it possible for a local user to gain elevated privileges, and potentially administrative access.

Hylafax Hostname Format String Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Hylafax Hostname Format String Vulnerability

Solution:
Fixes are available:


Hylafax Hylafax 4.1

• Hylafax hylafax-4.1.3.tar.gz
  ftp://ftp.hylafax.org/source/hylafax-4.1.3.tar.gz


• Mandrake hylafax-4.1-0.11mdk.i586.rpm
  Linux-Mandrake 7.1.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake hylafax-4.1-0.11mdk.i586.rpm
  Linux-Mandrake 7.2.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake hylafax-4.1-0.11mdk.i586.rpm
  Mandrake Corporate Server 1.0.1.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake hylafax-4.1.3-1.1mdk.i586.rpm
  Mandrake Linux 8.0.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake hylafax-4.1.3-1.1mdk.i586.rpm
  Mandrake Linux 8.1.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake hylafax-4.1.3-1.1mdk.i586.rpm
  Mandrake Linux 8.2.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake hylafax-4.1.3-1.1mdk.ia64.rpm
  Mandrake Linux 8.1/ia64.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake hylafax-4.1.3-1.1mdk.ppc.rpm
  Mandrake Linux 8.0/ppc.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake hylafax-4.1.3-1.1mdk.ppc.rpm
  Mandrake Linux 8.2/ppc.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake hylafax-client-4.1-0.11mdk.i586.rpm
  Linux-Mandrake 7.1.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake hylafax-client-4.1-0.11mdk.i586.rpm
  Linux-Mandrake 7.2.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake hylafax-client-4.1-0.11mdk.i586.rpm
  Mandrake Corporate Server 1.0.1.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake hylafax-client-4.1.3-1.1mdk.i586.rpm
  Mandrake Linux 8.0.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake hylafax-client-4.1.3-1.1mdk.i586.rpm
  Mandrake Linux 8.1.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake hylafax-client-4.1.3-1.1mdk.i586.rpm
  Mandrake Linux 8.2.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake hylafax-client-4.1.3-1.1mdk.ia64.rpm
  Mandrake Linux 8.1/ia64.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake hylafax-client-4.1.3-1.1mdk.ppc.rpm
  Mandrake Linux 8.0/ppc.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake hylafax-client-4.1.3-1.1mdk.ppc.rpm
  Mandrake Linux 8.2/ppc.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake hylafax-server-4.1-0.11mdk.i586.rpm
  Linux-Mandrake 7.1.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake hylafax-server-4.1-0.11mdk.i586.rpm
  Linux-Mandrake 7.2.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake hylafax-server-4.1-0.11mdk.i586.rpm
  Mandrake Corporate Server 1.0.1.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake hylafax-server-4.1.3-1.1mdk.i586.rpm
  Mandrake Linux 8.0.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake hylafax-server-4.1.3-1.1mdk.i586.rpm
  Mandrake Linux 8.1.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake hylafax-server-4.1.3-1.1mdk.i586.rpm
  Mandrake Linux 8.2.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake hylafax-server-4.1.3-1.1mdk.ia64.rpm
  Mandrake Linux 8.1/ia64.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake hylafax-server-4.1.3-1.1mdk.ppc.rpm
  Mandrake Linux 8.0/ppc.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake hylafax-server-4.1.3-1.1mdk.ppc.rpm
  Mandrake Linux 8.2/ppc.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake libhylafax4.1.1-4.1.3-1.1mdk.i586.rpm
  Mandrake Linux 8.0.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake libhylafax4.1.1-4.1.3-1.1mdk.i586.rpm
  Mandrake Linux 8.1.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake libhylafax4.1.1-4.1.3-1.1mdk.i586.rpm
  Mandrake Linux 8.2.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake libhylafax4.1.1-4.1.3-1.1mdk.ia64.rpm
  Mandrake Linux 8.1/ia64.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake libhylafax4.1.1-4.1.3-1.1mdk.ppc.rpm
  Mandrake Linux 8.0/ppc.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake libhylafax4.1.1-4.1.3-1.1mdk.ppc.rpm
  Mandrake Linux 8.2/ppc.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake libhylafax4.1.1-devel-4.1.3-1.1mdk.i586.rpm
  Mandrake Linux 8.0.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake libhylafax4.1.1-devel-4.1.3-1.1mdk.i586.rpm
  Mandrake Linux 8.1.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake libhylafax4.1.1-devel-4.1.3-1.1mdk.i586.rpm
  Mandrake Linux 8.2.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake libhylafax4.1.1-devel-4.1.3-1.1mdk.ia64.rpm
  Mandrake Linux 8.1/ia64.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake libhylafax4.1.1-devel-4.1.3-1.1mdk.ppc.rpm
  Mandrake Linux 8.0/ppc.
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake libhylafax4.1.1-devel-4.1.3-1.1mdk.ppc.rpm
  Mandrake Linux 8.2/ppc.
  http://www.mandrakesecure.net/en/ftp.php

Hylafax Hylafax 4.1.1

• Debian hylafax-client_4.1.1-1.1_alpha.deb
  http://security.debian.org/pool/updates/main/h/hylafax/hylafax-client_ 4.1.1-1.1_alpha.deb


• Debian hylafax-client_4.1.1-1.1_arm.deb
  http://security.debian.org/pool/updates/main/h/hylafax/hylafax-client_ 4.1.1-1.1_arm.deb


• Debian hylafax-client_4.1.1-1.1_hppa.deb
  http://security.debian.org/pool/updates/main/h/hylafax/hylafax-client_ 4.1.1-1.1_hppa.deb


• Debian hylafax-client_4.1.1-1.1_i386.deb
  http://security.debian.org/pool/updates/main/h/hylafax/hylafax-client_ 4.1.1-1.1_i386.deb


• Debian hylafax-client_4.1.1-1.1_ia64.deb
  http://security.debian.org/pool/updates/main/h/hylafax/hylafax-client_ 4.1.1-1.1_ia64.deb


• Debian hylafax-client_4.1.1-1.1_m68k.deb
  http://security.debian.org/pool/updates/main/h/hylafax/hylafax-client_ 4.1.1-1.1_m68k.deb


• Debian hylafax-client_4.1.1-1.1_powerpc.deb
  http://security.debian.org/pool/updates/main/h/hylafax/hylafax-client_ 4.1.1-1.1_powerpc.deb


• Debian hylafax-client_4.1.1-1.1_s390.deb
  http://security.debian.org/pool/updates/main/h/hylafax/hylafax-client_ 4.1.1-1.1_s390.deb


• Debian hylafax-client_4.1.1-1.1_sparc.deb
  http://security.debian.org/pool/updates/main/h/hylafax/hylafax-client_ 4.1.1-1.1_sparc.deb


• Debian hylafax-doc_4.1.1-1.1_all.deb
  http://security.debian.org/pool/updates/main/h/hylafax/hylafax-doc_4.1 .1-1.1_all.deb


• Debian hylafax-server_4.1.1-1.1_alpha.deb
  http://security.debian.org/pool/updates/main/h/hylafax/hylafax-server_ 4.1.1-1.1_alpha.deb


• Debian hylafax-server_4.1.1-1.1_arm.deb
  http://security.debian.org/pool/updates/main/h/hylafax/hylafax-server_ 4.1.1-1.1_arm.deb


• Debian hylafax-server_4.1.1-1.1_hppa.deb
  http://security.debian.org/pool/updates/main/h/hylafax/hylafax-server_ 4.1.1-1.1_hppa.deb


• Debian hylafax-server_4.1.1-1.1_i386.deb
  http://security.debian.org/pool/updates/main/h/hylafax/hylafax-server_ 4.1.1-1.1_i386.deb


• Debian hylafax-server_4.1.1-1.1_ia64.deb
  http://security.debian.org/pool/updates/main/h/hylafax/hylafax-server_ 4.1.1-1.1_ia64.deb


• Debian hylafax-server_4.1.1-1.1_m68k.deb
  http://security.debian.org/pool/updates/main/h/hylafax/hylafax-server_ 4.1.1-1.1_m68k.deb


• Debian hylafax-server_4.1.1-1.1_powerpc.deb
  http://security.debian.org/pool/updates/main/h/hylafax/hylafax-server_ 4.1.1-1.1_powerpc.deb


• Debian hylafax-server_4.1.1-1.1_s390.deb
  http://security.debian.org/pool/updates/main/h/hylafax/hylafax-server_ 4.1.1-1.1_s390.deb


• Debian hylafax-server_4.1.1-1.1_sparc.deb
  http://security.debian.org/pool/updates/main/h/hylafax/hylafax-server_ 4.1.1-1.1_sparc.deb


• Hylafax hylafax-4.1.3.tar.gz
  ftp://ftp.hylafax.org/source/hylafax-4.1.3.tar.gz

Hylafax Hylafax 4.1.2

• Hylafax hylafax-4.1.3.tar.gz
  ftp://ftp.hylafax.org/source/hylafax-4.1.3.tar.gz

Hylafax Hostname Format String Vulnerability

References:

• Hylafax Homepage (Hylafax)