• info
• discussion
• exploit
• solution
• references

CAPI4Hylafax Remote Arbitrary Command Execution Vulnerability

Solution:
SUSE Linux-based products containing capi4hylafax have fixes available; please see the referenced advisory for more information.


CAPI4Hylafax CAPIHylafax 1.2.3

• Debian capi4hylafax_01.02.03-10sarge2_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/capi4hylafax/capi4hylaf ax_01.02.03-10sarge2_alpha.deb


• Debian capi4hylafax_01.02.03-10sarge2_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/capi4hylafax/capi4hylaf ax_01.02.03-10sarge2_amd64.deb


• Debian capi4hylafax_01.02.03-10sarge2_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/capi4hylafax/capi4hylaf ax_01.02.03-10sarge2_arm.deb


• Debian capi4hylafax_01.02.03-10sarge2_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/capi4hylafax/capi4hylaf ax_01.02.03-10sarge2_i386.deb


• Debian capi4hylafax_01.02.03-10sarge2_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/capi4hylafax/capi4hylaf ax_01.02.03-10sarge2_ia64.deb


• Debian capi4hylafax_01.02.03-10sarge2_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/capi4hylafax/capi4hylaf ax_01.02.03-10sarge2_m68k.deb


• Debian capi4hylafax_01.02.03-10sarge2_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/capi4hylafax/capi4hylaf ax_01.02.03-10sarge2_powerpc.deb


• Debian capi4hylafax_01.02.03-10sarge2_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/c/capi4hylafax/capi4hylaf ax_01.02.03-10sarge2_sparc.deb

Hylafax Hylafax 4.2.5

• SuSE capi4hylafax-4.2.5-14.5.i586.rpm
  openSUSE 10.1
  ftp://ftp.suse.com/pub/suse/i386/update/10.1/rpm/i586/capi4hylafax-4.2 .5-14.5.i586.rpm


• SuSE capi4hylafax-4.2.5-14.5.x86_64.rpm
  openSUSE 10.1
  ftp://ftp.suse.com/pub/suse/x86_64/update/10.1/rpm/x86_64/capi4hylafax -4.2.5-14.5.x86_64.rpm

Hylafax Hylafax 4.3

• SuSE capi4hylafax-4.3.0-25.2.i586.rpm
  openSUSE 10.2
  ftp://ftp.suse.com/pub/suse/i386/update/10.2/rpm/i586/capi4hylafax-4.3 .0-25.2.i586.rpm


• SuSE capi4hylafax-4.3.0-25.2.x86_64.rpm
  openSUSE 10.2
  ftp://ftp.suse.com/pub/suse/x86_64/update/10.2/rpm/x86_64/capi4hylafax -4.3.0-25.2.x86_64.rpm