HylaFAX Insecure Temporary File Creation Vulnerability

HylaFAX Insecure Temporary File Creation Vulnerability

Solution:
Gentoo has released advisory GLSA 200509-21 to address this issue. Gentoo updates may be applied by running the following commands as the superuser:

emerge --sync
emerge --ask --oneshot --verbose net-misc/hylafax

Mandriva has released advisory MDKSA-2005:177, along with fixes to address this issue in various Mandrake Linux operating systems. Please see the referenced advisory for further information.

Debian Linux has released security advisory DSA 865-1 addressing this issue. Please see the referenced advisory for details on obtaining and applying the appropriate updates.

---
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: vuldb@securityfocus.com <mailto:vuldb@securityfocus.com>.

Hylafax Hylafax 4.2.1

Debian hylafax-client_4.2.1-5sarge1_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/h/hylafax/hylafax-client_ 4.2.1-5sarge1_hppa.deb

Debian hylafax-client_4.2.1-5sarge1_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/h/hylafax/hylafax-client_ 4.2.1-5sarge1_i386.deb

Debian hylafax-client_4.2.1-5sarge1_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/h/hylafax/hylafax-client_ 4.2.1-5sarge1_ia64.deb

Debian hylafax-client_4.2.1-5sarge1_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/h/hylafax/hylafax-client_ 4.2.1-5sarge1_m68k.deb

Debian hylafax-client_4.2.1-5sarge1_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/h/hylafax/hylafax-client_ 4.2.1-5sarge1_mips.deb

Debian hylafax-client_4.2.1-5sarge1_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/h/hylafax/hylafax-client_ 4.2.1-5sarge1_mipsel.deb

Debian hylafax-client_4.2.1-5sarge1_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/h/hylafax/hylafax-client_ 4.2.1-5sarge1_powerpc.deb

Debian hylafax-client_4.2.1-5sarge1_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/h/hylafax/hylafax-client_ 4.2.1-5sarge1_s390.deb

Debian hylafax-client_4.2.1-5sarge1_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/h/hylafax/hylafax-client_ 4.2.1-5sarge1_sparc.deb

Debian hylafax-server_4.2.1-5sarge1_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/h/hylafax/hylafax-server_ 4.2.1-5sarge1_arm.deb

Debian hylafax-server_4.2.1-5sarge1_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/h/hylafax/hylafax-server_ 4.2.1-5sarge1_hppa.deb

Debian hylafax-server_4.2.1-5sarge1_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/h/hylafax/hylafax-server_ 4.2.1-5sarge1_i386.deb

Debian hylafax-server_4.2.1-5sarge1_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/h/hylafax/hylafax-server_ 4.2.1-5sarge1_ia64.deb

Debian hylafax-server_4.2.1-5sarge1_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/h/hylafax/hylafax-server_ 4.2.1-5sarge1_m68k.deb

Debian hylafax-server_4.2.1-5sarge1_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/h/hylafax/hylafax-server_ 4.2.1-5sarge1_mips.deb

Debian hylafax-server_4.2.1-5sarge1_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/h/hylafax/hylafax-server_ 4.2.1-5sarge1_mipsel.deb

Debian hylafax-server_4.2.1-5sarge1_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/h/hylafax/hylafax-server_ 4.2.1-5sarge1_powerpc.deb

Debian hylafax-server_4.2.1-5sarge1_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/h/hylafax/hylafax-server_ 4.2.1-5sarge1_s390.deb

Debian hylafax-server_4.2.1-5sarge1_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/h/hylafax/hylafax-server_ 4.2.1-5sarge1_sparc.deb

Mandriva hylafax-4.2.1-2.1.20060mdk.i586.rpm
Mandrivalinux 2006.0:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva hylafax-4.2.1-2.1.20060mdk.x86_64.rpm
Mandrivalinux 2006.0/X86_64:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva hylafax-client-4.2.1-2.1.20060mdk.i586.rpm
Mandrivalinux 2006.0:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva hylafax-client-4.2.1-2.1.20060mdk.x86_64.rpm
Mandrivalinux 2006.0/X86_64:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva hylafax-server-4.2.1-2.1.20060mdk.i586.rpm
Mandrivalinux 2006.0:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva hylafax-server-4.2.1-2.1.20060mdk.x86_64.rpm
Mandrivalinux 2006.0/X86_64:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva lib64hylafax4.2.0-4.2.1-2.1.20060mdk.x86_64.rpm
Mandrivalinux 2006.0/X86_64:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva lib64hylafax4.2.0-devel-4.2.1-2.1.20060mdk.x86_64.rpm
Mandrivalinux 2006.0/X86_64:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva libhylafax4.2.0-4.2.1-2.1.20060mdk.i586.rpm
Mandrivalinux 2006.0:
http://www1.mandrivalinux.com/en/ftp.php3

Mandriva libhylafax4.2.0-devel-4.2.1-2.1.20060mdk.i586.rpm
Mandrivalinux 2006.0:
http://www1.mandrivalinux.com/en/ftp.php3